Riskcovery

CVE-2024-42299

fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed

State
Published
Severity
7.8 High
Published
Aug 17, 2024
Updated
Aug 5, 2026
Reserved
Jul 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed

If an NTFS file system is mounted to another system with different PAGE_SIZE from the original system, log->page_size will change in log_replay(), but log->page_{mask,bits} don't change correspondingly. This will cause a panic because "u32 bytes = log->page_size - page_off" will get a negative value in the later read_log_page().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b46acd6a6a627d876898e1c84d3f84902264b445 to before 0484adcb5fbcadd9ba0fd4485c42630f72e97da9Affected
  • b46acd6a6a627d876898e1c84d3f84902264b445 to before b90ceffdc975502bc085ce8e79c6adeff05f9521Affected
  • b46acd6a6a627d876898e1c84d3f84902264b445 to before 2cac0df3324b5e287d8020bc0708f7d2dec88a6fAffected
  • b46acd6a6a627d876898e1c84d3f84902264b445 to before 0a4ae2644e2a3b3b219aad9639fb2b0691d08420Affected
  • b46acd6a6a627d876898e1c84d3f84902264b445 to before 2fef55d8f78383c8e6d6d4c014b9597375132696Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.165 through 5.15.*Not affected
  • 6.1.103 through 6.1.*Not affected
  • 6.6.44 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.