CVE-2024-53147
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2024
Last modified:
24/12/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
exfat: fix out-of-bounds access of directory entries<br />
<br />
In the case of the directory size is greater than or equal to<br />
the cluster size, if start_clu becomes an EOF cluster(an invalid<br />
cluster) due to file system corruption, then the directory entry<br />
where ei->hint_femp.eidx hint is outside the directory, resulting<br />
in an out-of-bounds access, which may cause further file system<br />
corruption.<br />
<br />
This commit adds a check for start_clu, if it is an invalid cluster,<br />
the file or directory will be treated as empty.