Threats tagged 'ghsa-m5rf-wjr7-895f'

CVE-2024-56619 is a high-severity vulnerability in the Linux kernel's nilfs2 filesystem code. It involves a potential out-of-bounds memory access in the nilfs_find_entry() function caused by improper handling of a 64-bit inode size value. This flaw can lead to memory corruption or use-after-free conditions when the inode's i_size is corrupted with a large value. The issue arises from a local variable using an unsigned int type that truncates the 64-bit size, causing incorrect offset calculations. The vulnerability has been fixed by changing the variable type to u64 to preserve the full size value.