CVE-2024-41019 – Linux kernel NTFS3 Out-of-Bounds Read Vulnerability

CVE ID : CVE-2024-41019

Published : July 29, 2024, 7:15 a.m. | 1 hour, 5 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Validate ff offset

This adds sanity checks for ff offset. There is a check
on rt->first_free at first, but walking through by ff
without any check. If the second ff is a large offset.
We may encounter an out-of-bound read.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…CVE ID : CVE-2024-41019

Published : July 29, 2024, 7:15 a.m. | 1 hour, 5 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Validate ff offset

This adds sanity checks for ff offset. There is a check
on rt->first_free at first, but walking through by ff
without any check. If the second ff is a large offset.
We may encounter an out-of-bound read.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…