logo_clicknbuy.png

CVE-2024-57943 – Apache Exfat uninitialized page cache write vulnerability

The following table lists the changes that have been made to the
CVE-2024-57943 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jan. 21, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix the new buffer was not zeroed before writing

    Before writing, if a buffer_head marked as new, its data must
    be zeroed, otherwise uninitialized data in the page cache will
    be written.

    So this commit uses folio_zero_new_buffers() to zero the new
    buffers before ->write_end().
    Added Reference https://git.kernel.org/stable/c/942c6f91ab8d82a41650e717940b4e577173762f
    Added Reference https://git.kernel.org/stable/c/98e2fb26d1a9eafe79f46d15d54e68e014d81d8c
Share the Post:

Related Posts