CVE-2024-57943

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-57943
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57943.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-57943
Downstream
Published
2025-01-21T12:18:11Z
Modified
2025-10-15T20:45:59.073316Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
exfat: fix the new buffer was not zeroed before writing
Details

In the Linux kernel, the following vulnerability has been resolved:

exfat: fix the new buffer was not zeroed before writing

Before writing, if a buffer_head marked as new, its data must be zeroed, otherwise uninitialized data in the page cache will be written.

So this commit uses foliozeronewbuffers() to zero the new buffers before ->writeend().

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6630ea49103c3d45461e29b0f6eb0ce750aeb8f5
Fixed
942c6f91ab8d82a41650e717940b4e577173762f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6630ea49103c3d45461e29b0f6eb0ce750aeb8f5
Fixed
98e2fb26d1a9eafe79f46d15d54e68e014d81d8c

Affected versions

v6.*

v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.2
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13-rc1

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.10