Threats tagged 'ghsa-63fr-ch28-f5vq'

A vulnerability in the Linux kernel's Btrfs filesystem tree-checker component allows a crafted Btrfs image with an invalid INODE_REF name length to cause a kernel crash. The issue arises because the namelen field can be set to 4096, exceeding the normal limit of 255, leading to out-of-bound memory access and a kernel panic. This vulnerability has been resolved by adding extra validation for the INODE_REF namelen, rejecting crafted images with invalid lengths.