Threats tagged 'ghsa-fw43-f4rv-3fjg'

A vulnerability in the Linux kernel's HFS+ filesystem implementation (hfsplus_bmap_alloc) allows out-of-bounds memory access due to improper validation of record offset and length. This can cause a kernel crash (KASAN slab-out-of-bounds) and potentially lead to high impact including confidentiality, integrity, and availability loss. The issue arises when the offset or length exceeds the node size, leading to invalid page access. A patch has been applied to add proper validation of these values to prevent out-of-bounds access.