CVE-2024-53235

Summary

CVE-2024-53235 is a vulnerability affecting the Linux kernel's EROFS file system. The issue involves a null-pointer dereference in the 'fuse_read_args_fill' function of the 'fs/fuse/file.c' file. This flaw was reported by syzbot and was found in 'fuse_read_folio', 'filemap_read_folio', 'do_read_cache_folio', 'read_mapping_folio', 'erofs_bread', and 'erofs_read_superblock' functions. These functions are essential for network filesystems and FUSE, which require valid file pointers for their read I/O operations, unlike most file systems. The vulnerability has been resolved to prevent unintended pointer dereferencing and potential security implications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.