Linux Kernel Slab-Out-Of-Bounds Write Vulnerability in UDF File System

A slab-out-of-bounds write vulnerability has been identified in the Linux kernel's UDF (Universal Disk Format) file system, specifically in the 'udf_find_entry' function. This vulnerability allows for a write operation that exceeds the allocated memory buffer, potentially leading to memory corruption. The issue was reported by Syzbot and is present in Linux kernel version 6.1.0-rc2.

Impact

Exploitation of this vulnerability causes a slab-out-of-bounds write, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by creating a UDF file system image that triggers the 'udf_find_entry' function to write beyond the allocated memory buffer. This can be done using a tool like 'Syzbot' that automates the process of finding and exploiting such vulnerabilities in the Linux kernel.