IT

Tracker / CVE-2024-42299

CVE-2024-42299

High 7.8

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed If an NTFS file system is mounted to another system with different PAGE_SIZE from the original system, log->page_size will change in log_replay(), but log->page_{mask,bits} don't change correspondingly. This will cause a panic because "u32 bytes = log->page_size - page_off" will get a negative value in the later read_log_page().

Affected products and versions

linux linux_kernel · 5.15 → 5.15.165
linux linux_kernel · 5.16 → 6.1.103
linux linux_kernel · 6.2 → 6.6.44
linux linux_kernel · 6.7 → 6.10.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References