Linux Kernel LZ4 Decompression Out-of-Bounds Read Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's handling of LZ4 decompression. This issue arises in the LZ4_decompress_safe_partial function, where partial decoding can lead to an out-of-bounds read. The vulnerability occurs when the decompression routine encounters corrupted compressed data, creating extreme corner cases that the current decoding logic cannot properly handle. This problem was introduced when the decompression routine was ported from LZ4 version 1.8.3, and while the LZ4 upstream has addressed the issue, integrating the latest version into the Linux kernel will require significant effort.

Impact

Exploitation of this vulnerability can lead to out-of-bounds read, potentially allowing for memory corruption or information disclosure.