Threats Tagged 'ghsa-qvx5-h96v-vv5j'

A high-severity vulnerability in the Linux kernel's isofs module involving improper bounds checking of Rock Ridge symbolic link (SL) components has been resolved. The flaw allows an out-of-bounds read of up to 255 bytes when processing crafted SL records, potentially disclosing adjacent kernel memory to user space via readlink(). This occurs because the code did not verify that each SL component fit within the SL record before dereferencing it. The vulnerability affects systems mounting ISO 9660 images, which are commonly auto-mounted from untrusted removable media. The fix involves rejecting malformed SL components that exceed record boundaries, causing readlink() to fail safely rather than leak memory.