CVE-2024-43859

Summary

CVE-2024-43859 is a vulnerability affecting the Linux kernel's f2fs file system. The issue arises due to the lack of initialization of inode.i_crypt_info during specific file system operations, including mounting and garbage collection. This leads to a kernel NULL pointer dereference, potentially causing system crashes or allowing unauthorized access. The vulnerability has been addressed by relocating the truncation of preallocated blocks to f2fs_file_open(), following fscrypt_file_open().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.