Barebox Integer Overflow Vulnerability in ext4 Filesystem Handling

A vulnerability exists in barebox versions prior to 2025.01.0 within the ext4 filesystem handling, specifically in the 'ext4fs_read_symlink' function. The issue arises from an integer overflow when the function processes a crafted ext4 filesystem that includes an inode size of 0xffffffff. This overflow occurs because the function adds one to a little-endian 32-bit variable, leading to a zero allocation when the 'zalloc' function is called. Consequently, the function later uses the invalid inode size to copy data, allowing for a memory overwrite. This vulnerability is related to CVE-2024-57256.

Impact

Exploitation of this vulnerability allows for a memory overwrite, which could potentially be used to execute arbitrary code or cause a denial-of-service condition.

Remediation

Users can upgrade to barebox version 2025.01.0 or later to address this vulnerability.