CVE-2024-57943
published 2025-01-21CVE-2024-57943: In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before writing Before writing, if a buffer_head…
PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.19%
9.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the new buffer was not zeroed before writing
Before writing, if a buffer_head marked as new, its data must
be zeroed, otherwise uninitialized data in the page cache will
be written.
So this commit uses folio_zero_new_buffers() to zero the new
buffers before ->write_end().
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.12.10-1 (forky) | linux 6.12.10-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= 6630ea49103c3d45461e29b0f6eb0ce750aeb8f5 < 942c6f91ab8d82a41650e717940b4e577173762f | 942c6f91ab8d82a41650e717940b4e577173762f |
| linux | linux | >= 6630ea49103c3d45461e29b0f6eb0ce750aeb8f5 < 98e2fb26d1a9eafe79f46d15d54e68e014d81d8c | 98e2fb26d1a9eafe79f46d15d54e68e014d81d8c |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.12.10-1 | 6.12.10-1 |
| linux | linux_kernel | >= 0 < 6.12.10-1 | 6.12.10-1 |
| linux | linux_kernel | >= 6.12 < 6.12.10 | 6.12.10 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8LOW
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: exfat: fix the new buffer was not zeroed before writing
vendor_redhat·2025-01-21·CVSS 7.8
CVE-2024-57943 [HIGH] CWE-824 kernel: exfat: fix the new buffer was not zeroed before writing
kernel: exfat: fix the new buffer was not zeroed before writing
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the new buffer was not zeroed before writing
Before writing, if a buffer_head marked as new, its data must
be zeroed, otherwise uninitialized data in the page cache will
be written.
So this commit uses folio_zero_new_buffers() to zero the new
buffers before ->write_end().
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package:
Debian
CVE-2024-57943: linux - In the Linux kernel, the following vulnerability has been resolved: exfat: fix ...
vendor_debian·2024·CVSS 7.8
CVE-2024-57943 [HIGH] CVE-2024-57943: linux - In the Linux kernel, the following vulnerability has been resolved: exfat: fix ...
In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before writing Before writing, if a buffer_head marked as new, its data must be zeroed, otherwise uninitialized data in the page cache will be written. So this commit uses folio_zero_new_buffers() to zero the new buffers before ->write_end().
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.12.10-1)
sid: resolved (fixed in 6.12.10-1)
trixie: resolved (fixed in 6.12.10-1)
GHSA
GHSA-p9vw-f8rg-c624: In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the new buffer was not zeroed before writing
Before writing, if a buf
ghsa_unreviewed·2025-01-21
CVE-2024-57943 [HIGH] CWE-824 GHSA-p9vw-f8rg-c624: In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the new buffer was not zeroed before writing
Before writing, if a buf
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the new buffer was not zeroed before writing
Before writing, if a buffer_head marked as new, its data must
be zeroed, otherwise uninitialized data in the page cache will
be written.
So this commit uses folio_zero_new_buffers() to zero the new
buffers before ->write_end().
OSV
CVE-2024-57943: In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before writing Before writing, if a buffe
osv·2025-01-21·CVSS 7.8
CVE-2024-57943 [HIGH] CVE-2024-57943: In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before writing Before writing, if a buffe
In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before writing Before writing, if a buffer_head marked as new, its data must be zeroed, otherwise uninitialized data in the page cache will be written. So this commit uses folio_zero_new_buffers() to zero the new buffers before ->write_end().
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-01-21
Published