Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-53147

exfat: fix out-of-bounds access of directory entries

Description

In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater than or equal to the cluster size, if start_clu becomes an EOF cluster(an invalid cluster) due to file system corruption, then the directory entry where ei->hint_femp.eidx hint is outside the directory, resulting in an out-of-bounds access, which may cause further file system corruption. This commit adds a check for start_clu, if it is an invalid cluster, the file or directory will be treated as empty.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < 82dc96f0f4eec8afdde8467d21d1b6b989dbb20aaffected
  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < a0120d6463368378539ef928cf067d02372efb8caffected
  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < 3ddd1cb2b458ff6a193bc845f408dfff217db29eaffected
  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < 184fa506e392eb78364d9283c961217ff2c0617baffected

Linux Linux

Default version status: affected

  • 5.7affected
  • 0 to < 5.7unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.11.11 to ≤ 6.11.*unaffected
  • 6.12.2 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References