PT-2024-29739 · Linux+8 · Linux Kernel+8

Published

2024-06-19

·

Updated

2025-10-07

·

CVE-2024-42084

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue arises from the old ftruncate() syscall using a 32-bit off t, which misses a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative length accidentally succeeds in truncating to file size between 2GiB and 4GiB. Changing the type of the compat syscall to the signed compat off t changes the behavior so it instead returns -EINVAL. The native entry point, the truncate() syscall, and the corresponding loff t based variants are all correct already and do not suffer from this mistake.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-96

Related Identifiers

ALSA-2024:7000
ALSA-2024:7001
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2025-02549
CESA-2024_7000
CESA-2024_7001
CVE-2024-42084
DLA-4008-1
INFSA-2024_7000
INFSA-2024_7001
INFSA-2024_9315
OESA-2024-1961
OESA-2024-1962
OESA-2024-1964
OESA-2024-1996
OESA-2025-1078
RHSA-2024:7000
RHSA-2024:7001
RHSA-2024:9315
RHSA-2024_7000
RHSA-2024_7001
RHSA-2024_9315
RHSA-2025:3215
RLSA-2024:7001
USN-7003-1
USN-7003-2
USN-7003-3
USN-7003-4
USN-7003-5
USN-7006-1
USN-7007-1
USN-7007-2
USN-7007-3
USN-7009-1
USN-7009-2
USN-7019-1
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1

Affected Products

Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Ubuntu