In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate data run offset This adds sanity checks for data run offset. We should make sure data run offset is legit befo…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate data run offset This adds sanity checks for data run offset. We should make sure data run offset is legit before trying to unpack them, otherwise we may encounter use-after-free or some unexpected memory access behaviors. [ 82.940342] BUG: KASAN: use-after-free in run_unpack+0x2e3/0x570 [ 82.941180] Read of size 1 at addr ffff888008a8487f by task mount/240 [ 82.941670] [ 82.942069] CPU: 0 PID: 240 …
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/6db620863f8528ed9a9aa5ad323b26554a17881d Patch
- https://git.kernel.org/stable/c/9173b89c16a603d73c434b695fe2a7a13491300f Patch
- https://git.kernel.org/stable/c/de5e0955248ff90a2ae91e7f5c108392b52152d0 Patch
- https://git.kernel.org/stable/c/e0455361d3068066a91fe18282b751925d7b5ee7 Patch
Timeline
- nvd_ingest NVD