Linux Kernel LZO Compression Buffer Overrun Vulnerability

A buffer overrun vulnerability in the LZO compression code of the Linux kernel has been addressed. Unlike the decompression process, the compression routine did not verify output boundaries, relying on the assumption that sufficient buffer space was always provided by the caller. This oversight allowed for potential buffer overflows. The vulnerability has been mitigated by introducing a safe compression interface that checks buffer limits before writing, and by applying this interface in the LZO compression code.

Impact

Exploitation of this vulnerability could lead to buffer overrun issues, potentially allowing for arbitrary code execution or causing a denial-of-service condition.