Threats tagged 'ghsa-35q6-8fhf-pg65'

A vulnerability in the Linux kernel's UFS filesystem code allowed unvalidated cylinder group metadata to be cached, leading to potential out-of-bounds memory accesses. The flaw involved copying cylinder group indices and rotor positions directly from disk without validation, which could cause invalid indexing during allocation and free operations. This issue was fixed by rejecting cylinder groups with inconsistent metadata before caching. The vulnerability affects specific Linux kernel versions and has a CVSS score of 7.0, indicating a medium severity.