CVE-2024-53147

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2024
Last modified:
24/12/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> exfat: fix out-of-bounds access of directory entries<br /> <br /> In the case of the directory size is greater than or equal to<br /> the cluster size, if start_clu becomes an EOF cluster(an invalid<br /> cluster) due to file system corruption, then the directory entry<br /> where ei-&gt;hint_femp.eidx hint is outside the directory, resulting<br /> in an out-of-bounds access, which may cause further file system<br /> corruption.<br /> <br /> This commit adds a check for start_clu, if it is an invalid cluster,<br /> the file or directory will be treated as empty.

Impact