Threats tagged 'ghsa-276c-3gx4-x9pr'

CVE-2024-49996 is a high-severity buffer overflow vulnerability in the Linux kernel's CIFS module when parsing NFS reparse points. The flaw arises from incorrect calculation of the DataBuffer size, leading to out-of-bounds memory access. The vulnerability has been fixed by properly subtracting the InodeType size from the ReparseDataLength and adding checks on buffer sizes before accessing certain members.