CVE-2022-49846

A flaw was found in the Linux kernel's Universal Disk Format (UDF) file system. An out-of-bounds memory write occurs due to an incorrect buffer size calculation when processing long filenames. A local user capable of mounting file systems can trigger this issue by mounting a crafted UDF image and accessing or creating files with specially constructed long names. This flaw leads to kernel memory corruption, potentially allowing privilege escalation or causing a Denial of Service (DoS) via a system crash.

A slab-out-of-bounds write was discovered in udf_find_entry() due to incorrect allocation size when handling long filenames in split name descriptors. This can be triggered by mounting a crafted UDF image and attempting to create a file with a specially constructed name. Although local privileges are required, the flaw allows kernel memory corruption, leading to potential privilege escalation or DoS.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module udf from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.