CVE-2024-53147

Public on 2024-12-24
Modified on 2025-01-07
Description
In the Linux kernel, the following vulnerability has been resolved:

exfat: fix out-of-bounds access of directory entries

In the case of the directory size is greater than or equal to
the cluster size, if start_clu becomes an EOF cluster(an invalid
cluster) due to file system corruption, then the directory entry
where ei->hint_femp.eidx hint is outside the directory, resulting
in an out-of-bounds access, which may cause further file system
corruption.

This commit adds a check for start_clu, if it is an invalid cluster,
the file or directory will be treated as empty.
Severity
Medium severity
Medium
CVSS v3 Base Score
5.3
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
HAQM Linux 1 kernel No Fix Planned
HAQM Linux 2 - Core kernel Pending Fix
HAQM Linux 2 - Kernel-5.10 Extra kernel Pending Fix
HAQM Linux 2 - Kernel-5.15 Extra kernel Pending Fix
HAQM Linux 2 - Kernel-5.4 Extra kernel Pending Fix
HAQM Linux 2023 kernel Pending Fix

CVSS Scores

Score Type Score Vector
HAQM Linux CVSSv3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H