CVE-2024-42143

kernel: orangefs: fix out-of-bounds fsid access

Published Jul 30, 2024 CVSS 3.1 · 5.1 Medium EPSS n/a KEV · Not listed
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-5747-1 linux security update
History
Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: orangefs: fix out-of-bounds fsid access Arnd Bergmann sent a patch to fsdevel, he says: "orangefs_statfs() copies two consecutive fields of the superblock into the statfs structure, which triggers a warning from the string fortification helpers" Jan Kara suggested an alternate way to do the patch to make it more readable. I ran both ideas through xfstests and both seem fine. This patch is based on Jan Kara's suggestion. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title orangefs: fix out-of-bounds fsid access kernel: orangefs: fix out-of-bounds fsid access
Type Values Removed Values Added
Weaknesses CWE-125
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

cvssV3_1

{'score': 5.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H'}

Subscriptions

No data.

Weaknesses

Sources

Status
REJECTED
Assigner
Linux
Published
Updated
Aug 22, 2024, 12:01 AM
Reserved
Jul 29, 2024, 3:50 PM
Status
Rejected
Published
Jul 30, 2024, 8:15 AM
Modified
Oct 16, 2026, 1:10 PM
Severity
Moderate
Public date
Jul 30, 2024, 12:00 AM