Threats tagged 'ghsa-xvj4-9h68-29rx'

CVE-2024-42311 is a medium-severity vulnerability in the Linux kernel's HFS filesystem implementation. The issue involves uninitialized fields (.tz_secondswest, .cached_start, and .cached_blocks) in the hfs_inode_info structure after the hfs_alloc_inode() function is called. This uninitialized value access was detected by KMSAN (Kernel Memory Sanitizer) and could lead to kernel instability or crashes. The vulnerability was reported by Syzbot and fixed by initializing the affected fields properly.