Описание
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Check if more than chunk-size bytes are written
A incorrectly formatted chunk may decompress into
more than LZNT_CHUNK_SIZE bytes and a index out of bounds
will occur in s_max_off.
A flaw was found in the Linux kernel's NTFS3 file system driver. An attacker with local access could craft a specially malformed NTFS compressed chunk. When this chunk is decompressed, it can lead to an out-of-bounds write, potentially causing a denial of service or other system instability.
Меры по смягчению последствий
To prevent the ntfs3 kernel module from loading, blacklist it. This action may affect systems requiring the mounting of NTFS filesystems.
- Create
/etc/modprobe.d/blacklist-ntfs3.confwithblacklist ntfs3. - Regenerate the initramfs:
dracut -f -v(RHEL 8/9) ormkinitrd -f -v /boot/initramfs-$(uname -r).img $(uname -r)(RHEL 7). - Reboot the system to ensure the module is not loaded. If the module is currently loaded, it can be unloaded with
rmmod ntfs3, but a reboot is necessary for persistent blacklisting.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check if more than chunk-size bytes are written A incorrectly formatted chunk may decompress into more than LZNT_CHUNK_SIZE bytes and a index out of bounds will occur in s_max_off.
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check if more than chunk-size bytes are written A incorrectly formatted chunk may decompress into more than LZNT_CHUNK_SIZE bytes and a index out of bounds will occur in s_max_off.
fs/ntfs3: Check if more than chunk-size bytes are written
In the Linux kernel, the following vulnerability has been resolved: f ...
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check if more than chunk-size bytes are written A incorrectly formatted chunk may decompress into more than LZNT_CHUNK_SIZE bytes and a index out of bounds will occur in s_max_off.
EPSS
7.1 High
CVSS3