Threats tagged 'ghsa-64p7-wm49-vgg4'

CVE-2024-56548 is a high-severity vulnerability in the Linux kernel's hfsplus filesystem driver. The flaw arises from querying the device logical block size multiple times, which can change during operation, particularly with loop devices. This can lead to out-of-bounds writes when the driver uses inconsistent block sizes during read operations, causing a use-after-free condition detected by KASAN. The issue has been fixed by initializing a minimum IO size to prevent inconsistent block size usage.