CVE-2024-50247

Summary

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Check if more than chunk-size bytes are written

A incorrectly formatted chunk may decompress into more than LZNT_CHUNK_SIZE bytes and a index out of bounds will occur in s_max_off.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < e5ae7859008688626b4d2fa6139eeaa08e255053affected
LinuxLinux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < 1b6bc5f7212181093b6c5310eea216fc09c721a9affected
LinuxLinux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < 5f21e3e60982cd7353998b4f59f052134fd47d64affected
LinuxLinux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < 4a4727bc582832f354e0d3d49838a401a28ae25eaffected
LinuxLinux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < 9931122d04c6d431b2c11b5bb7b10f28584067f0affected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux5.15.171 <= 5.15.*unaffected
LinuxLinux6.1.116 <= 6.1.*unaffected
LinuxLinux6.6.60 <= 6.6.*unaffected
LinuxLinux6.11.7 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References