Orta CVSS 5.5

CVE-2024-26973: Linux Kernel: güvenlik açığı

Yayın: 1 Mayıs 2024 09:15 · Güncelleme: 6 Kasım 2026 09:47

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so the file handle is actually 12 bytes long and the last two bytes remain uninitialized. This is not great at we potentially leak uninitialized information with the handle to userspace. Properly initialize the full handle length.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %0,26 (yüzdelik 17)
CWE: CWE-908
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	3.10	—	4.19.312
linux-linux-kernel	4.20	—	5.4.274
linux-linux-kernel	5.5	—	5.10.215
linux-linux-kernel	5.11	—	5.15.154
linux-linux-kernel	5.16	—	6.1.84
linux-linux-kernel	6.2	—	6.6.24
linux-linux-kernel	6.7	—	6.7.12
linux-linux-kernel	6.8	—	6.8.3
debian-debian-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları