Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42299
HistoryAug 17, 2024 - 9:09 a.m.

CVE-2024-42299 fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed

2024-08-1709:09:06
Linux
github.com
2
linux kernel
ntfs file system
vulnerability
page size.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed

If an NTFS file system is mounted to another system with different
PAGE_SIZE from the original system, log->page_size will change in
log_replay(), but log->page_{mask,bits} don’t change correspondingly.
This will cause a panic because “u32 bytes = log->page_size - page_off”
will get a negative value in the later read_log_page().

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-42299