From 9ed2186f668c76aeb472de170d62b499d85a1915 Mon Sep 17 00:00:00 2001 From: Marc Deslauriers Date: Tue, 15 Jul 2025 13:34:08 -0400 Subject: [PATCH] udiskslinuxmanager: Add lower bounds check to fd_index CVE: CVE-2025-8067 Make sure fd_index isn't negative as this can lead to an OOB read resulting in a crash, or to exposing internal file descriptors. Reported by Michael Imfeld (born0monday). (cherry picked from commit 280b127124332c6436bc8273ef677f218b435593) Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/9ed2186f668c76aeb472de170d62b499d85a1915] Signed-off-by: Saravanan --- src/udiskslinuxmanager.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/udiskslinuxmanager.c b/src/udiskslinuxmanager.c index 7a614f44..76694cfd 100644 --- a/src/udiskslinuxmanager.c +++ b/src/udiskslinuxmanager.c @@ -359,7 +359,7 @@ handle_loop_setup (UDisksManager *object, goto out; fd_num = g_variant_get_handle (fd_index); - if (fd_list == NULL || fd_num >= g_unix_fd_list_get_length (fd_list)) + if (fd_list == NULL || fd_num < 0 || fd_num >= g_unix_fd_list_get_length (fd_list)) { g_dbus_method_invocation_return_error (invocation, UDISKS_ERROR, -- 2.39.4