CVE-2024-43845

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> udf: Fix bogus checksum computation in udf_rename()<br /> <br /> Syzbot reports uninitialized memory access in udf_rename() when updating<br /> checksum of &amp;#39;..&amp;#39; directory entry of a moved directory. This is indeed<br /> true as we pass on-stack diriter.fi to the udf_update_tag() and because<br /> that has only struct fileIdentDesc included in it and not the impUse or<br /> name fields, the checksumming function is going to checksum random stack<br /> contents beyond the end of the structure. This is actually harmless<br /> because the following udf_fiiter_write_fi() will recompute the checksum<br /> from on-disk buffers where everything is properly included. So all that<br /> is needed is just removing the bogus calculation.