High · published August 17, 2024
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
If an NTFS file system is mounted to another system with different
PAGE_SIZE from the original system, log->page_size will change in
log_replay(), but log->page_{mask,bits} don't change correspondingly.
This will cause a panic because "u32 bytes = log->page_size - page_off"
will get a negative value in the later read_log_page().
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.15, < 5.15.165 | 5.15.165 |
| linux/linux_kernel | ≥ 5.16, < 6.1.103 | 6.1.103 |
| linux/linux_kernel | ≥ 6.2, < 6.6.44 | 6.6.44 |
| linux/linux_kernel | ≥ 6.7, < 6.10.3 | 6.10.3 |