Threats tagged 'ghsa-h3c9-8xwq-2j95'

CVE-2024-42084 is a vulnerability in the Linux kernel's ftruncate syscall when used in compat mode on 64-bit architectures. The issue arises because the 32-bit off_t type used in the old ftruncate syscall does not properly sign-extend negative offsets, allowing a negative length to truncate files between 2GiB and 4GiB incorrectly. This behavior has been corrected by changing the syscall to use a signed compat_off_t type, which causes the syscall to return an error (-EINVAL) instead of truncating improperly. Other related syscalls using loff_t are not affected.