Threats tagged 'ghsa-qf78-3cfm-29pm'

CVE-2024-47757 is a high-severity vulnerability in the Linux kernel's nilfs2 filesystem code. It involves a potential out-of-bounds (OOB) read in the function nilfs_btree_check_delete(), which occurs when the root node of a b-tree has no entries. This condition can cause memory access outside the intended block buffer when retrieving the maximum key. Although this scenario is uncommon because nilfs2 normally does not create b-tree mappings with zero child nodes, it can happen if the root node read from a device is configured improperly. The issue has been fixed by adding a check to prevent this out-of-bounds access.