In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Update log->page{mask,bits} if log->pagesize changed
If an NTFS file system is mounted to another system with different PAGESIZE from the original system, log->pagesize will change in logreplay(), but log->page{mask,bits} don't change correspondingly. This will cause a panic because "u32 bytes = log->pagesize - pageoff" will get a negative value in the later readlogpage().
[
{
"id": "CVE-2024-42299-120ebfc5",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"3130104869630658471775961022717478549",
"198787018340130103361528367272067306455",
"195440745100565732847205956666023324824"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a4ae2644e2a3b3b219aad9639fb2b0691d08420",
"target": {
"file": "fs/ntfs3/fslog.c"
}
},
{
"id": "CVE-2024-42299-2f18731d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"1320548019641708342027917227225830162",
"246795554621106727740729387194334091916",
"329800187878125900590880817912800245413"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b90ceffdc975502bc085ce8e79c6adeff05f9521",
"target": {
"file": "fs/ntfs3/fslog.c"
}
},
{
"id": "CVE-2024-42299-60f1a681",
"signature_version": "v1",
"digest": {
"length": 27841.0,
"function_hash": "187574525456531170992470021690333347876"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b90ceffdc975502bc085ce8e79c6adeff05f9521",
"target": {
"file": "fs/ntfs3/fslog.c",
"function": "log_replay"
}
},
{
"id": "CVE-2024-42299-7754ca2d",
"signature_version": "v1",
"digest": {
"length": 28290.0,
"function_hash": "274598612507172793371595861603392776247"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cac0df3324b5e287d8020bc0708f7d2dec88a6f",
"target": {
"file": "fs/ntfs3/fslog.c",
"function": "log_replay"
}
},
{
"id": "CVE-2024-42299-864511e3",
"signature_version": "v1",
"digest": {
"length": 28290.0,
"function_hash": "274598612507172793371595861603392776247"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a4ae2644e2a3b3b219aad9639fb2b0691d08420",
"target": {
"file": "fs/ntfs3/fslog.c",
"function": "log_replay"
}
},
{
"id": "CVE-2024-42299-9a6c1ff0",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"3130104869630658471775961022717478549",
"198787018340130103361528367272067306455",
"195440745100565732847205956666023324824"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cac0df3324b5e287d8020bc0708f7d2dec88a6f",
"target": {
"file": "fs/ntfs3/fslog.c"
}
}
]