CVE-2024-44947

CVE-2024-44947 설명 : Linux 커널에서 다음 취약점이 해결되었습니다: fuse: uptodate 설정 전에 EOF 이후 페이지 콘텐츠 초기화. fusenotifystore는 fusedoreadpage와 달리 페이지 제로잉을 활성화하지 않습니다부분 페이지 콘텐츠를 변경하는 데 사용될 수 있기 때문. 따라서 fusenotifystore는 페이지를 uptodate로 표시하기 전에 페이지 콘텐츠파일 끝 이후의 페이지 부분 포함를 완전히 초기화하는 데 더 주의해야 합니다. 현재 코드는 EOF 이후의 페이지 콘텐츠를...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: Folios with a right number of references are dropped when they exceed the limit set by EOF. When a “after-split” folio is large and needs to be dropped due to reaching EOF, the function folioputrefsfolio,...

UBUNTU-CVE-2023-53081

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into underlying page cache page, ocfs2writeendnolock just zeroes out and dirties the page. This can leave dirty page beyond EOF and if page...

SUSE CVE-2025-22000

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: drop beyond-EOF folios with the right number of refs When an after-split folio is large and needs to be dropped due to EOF, folioputrefsfolio, folionrpagesfolio should be used to drop all page cache refs. Otherwise...

AZL-49296 CVE-2024-44947 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fusenotifystore, unlike fusedoreadpage, does not enable page zeroing because it can be used to change partial page contents. So fusenotifystore must be more carefu...

CVE-2024-44947

In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fusenotifystore, unlike fusedoreadpage, does not enable page zeroing because it can be used to change partial page contents. So fusenotifystore must be more carefu...