CVE-2024-42084

ftruncate: pass a signed offset

published July 29, 2024

CVSS
—
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ftruncate: pass a signed offset

The old ftruncate() syscall, using the 32-bit off_t misses a sign

extension when called in compat mode on 64-bit architectures. As a

result, passing a negative length accidentally succeeds in truncating

to file size between 2GiB and 4GiB.

Changing the type of the compat syscall to the signed compat_off_t

changes the behavior so it instead returns -EINVAL.

The native entry point, the truncate() syscall and the corresponding

loff_t based variants are all correct already and do not suffer

from this mistake.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00229 · 12.9th percentile
Published
2024-07-29T16:26Z
EPSS history
Timeline
  • 29 JUL 16:26Z
    ftruncate: pass a signed offset
    cvelistv5