CVE-2024-57943: exfat: fix the new buffer was not zeroed before writing
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the new buffer was not zeroed before writing
Before writing, if a bufferhead marked as new, its data must be zeroed, otherwise uninitialized data in the page cache will be written.
So this commit uses foliozeronewbuffers() to zero the new buffers before ->writeend().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57943?
The severity of CVE-2024-57943 has not been explicitly assigned, but it involves the potential exposure of uninitialized data.
How do I fix CVE-2024-57943?
To fix CVE-2024-57943, ensure that your Linux kernel is updated to the latest version that includes the commit addressing this vulnerability.
What does CVE-2024-57943 affect?
CVE-2024-57943 affects the Linux kernel, specifically related to the exfat filesystem handling.
What kind of vulnerability is CVE-2024-57943?
CVE-2024-57943 is a data handling vulnerability that allows uninitialized data to be written to disk.
Is CVE-2024-57943 exploitable?
While CVE-2024-57943 could lead to data leakage, the actual exploitability depends on specific conditions and the system's configuration.