CVE-2024-50247

Summary

CVE-2024-50247 is a vulnerability affecting the Linux kernel's NFS (Network File System) module for handling NTFS (New Technology File System) files. The issue lies in the fs/ntfs3 component, which fails to properly check the size of data being decompressed using LZNT1 compression. An incorrectly formatted chunk may result in more data being decompressed than intended, leading to an index out of bounds condition. This could potentially allow an attacker to manipulate data and execute unintended code, resulting in a security vulnerability. The issue has been resolved.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.