Threats tagged 'ghsa-3c24-c79w-qw24'

A critical vulnerability in the Linux kernel's iomap subsystem involves incorrect handling of read ranges for non-block-aligned positions. The function iomap_adjust_read_range() incorrectly assumes block alignment, leading to underflow in length calculations and returning invalid read positions. This flaw can cause incorrect data reads and potentially compromise confidentiality, integrity, and availability of the system. The issue was identified through syzbot testing and affects the erofs filesystem. A fix has been implemented to correctly account for block offsets when calculating bytes to skip for uptodate blocks.