Linux Kernel Cachefiles KASAN Slab-Out-Of-Bounds Vulnerability

A slab-out-of-bounds vulnerability has been identified in the Linux kernel's cachefiles component. This issue arises in version 5.18.0-rc1-nfs-fscache-netfs and is related to how volume coherency data is handled when setting extended attributes. The vulnerability was detected by the Kernel Address Sanitizer (KASAN), which reported a memory access error caused by a task writing beyond the allocated buffer size. This improper handling of data can potentially be exploited to manipulate memory, leading to undefined behavior or memory corruption.

Impact

Exploitation of this vulnerability could result in a heap-based buffer overflow, allowing for memory corruption or arbitrary code execution.