Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-42143
HistoryJul 30, 2024 - 8:15 a.m.

CVE-2024-42143

2024-07-3008:15:06
Debian Security Bug Tracker
security-tracker.debian.org
3
orangefs
fix
out-of-bounds
fsid
access
cve-2024-42143
unix

AI Score

7.1

Confidence

High

EPSS

0

Percentile

9.5%

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix out-of-bounds fsid access Arnd Bergmann sent a patch to fsdevel, he says: “orangefs_statfs() copies two consecutive fields of the superblock into the statfs structure, which triggers a warning from the string fortification helpers” Jan Kara suggested an alternate way to do the patch to make it more readable. I ran both ideas through xfstests and both seem fine. This patch is based on Jan Kara’s suggestion.

AI Score

7.1

Confidence

High

EPSS

0

Percentile

9.5%