PT-2024-30705 · Linux+4 · Linux Kernel+4
Syzbot
·
Published
2024-06-20
·
Updated
2025-02-04
·
CVE-2024-43845
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a bogus checksum computation in the
udf rename() function when updating the checksum of the '..' directory entry of a moved directory. This occurs because the diriter.fi passed to udf update tag() only includes struct fileIdentDesc and not the impUse or name fields, causing the checksumming function to checksum random stack contents beyond the end of the structure. However, this is harmless as the subsequent udf fiiter write fi() will recompute the checksum from on-disk buffers where everything is properly included.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu