CVE - CVE-2024-41019

CVE-ID
CVE-2024-41019	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate ff offset This adds sanity checks for ff offset. There is a check on rt->first_free at first, but walking through by ff without any check. If the second ff is a large offset. We may encounter an out-of-bound read.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/35652dfa8cc9a8a900ec0f1e0395781f94ffc5f0 URL:https://git.kernel.org/stable/c/35652dfa8cc9a8a900ec0f1e0395781f94ffc5f0 MISC:https://git.kernel.org/stable/c/50c47879650b4c97836a0086632b3a2e300b0f06 URL:https://git.kernel.org/stable/c/50c47879650b4c97836a0086632b3a2e300b0f06 MISC:https://git.kernel.org/stable/c/617cf144c206f98978ec730b17159344fd147cb4 URL:https://git.kernel.org/stable/c/617cf144c206f98978ec730b17159344fd147cb4 MISC:https://git.kernel.org/stable/c/6ae7265a7b816879fd0203e83b5030d3720bbb7a URL:https://git.kernel.org/stable/c/6ae7265a7b816879fd0203e83b5030d3720bbb7a MISC:https://git.kernel.org/stable/c/818a257428644b8873e79c44404d8fb6598d4440 URL:https://git.kernel.org/stable/c/818a257428644b8873e79c44404d8fb6598d4440 MISC:https://git.kernel.org/stable/c/82c94e6a7bd116724738aa67eba6f5fedf3a3319 URL:https://git.kernel.org/stable/c/82c94e6a7bd116724738aa67eba6f5fedf3a3319
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)