CyberRota Analysis
AI-GeneratedThe vulnerability affects the nilfs2 filesystem in the Linux kernel, where improper validation of super-root inode metadata sizes can lead to out-of-bounds reads during inode parsing. This flaw could allow attackers to exploit malformed filesystem images, potentially leading to information disclosure or system instability. Linux system administrators and developers utilizing nilfs2 should prioritize applying the relevant patches to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent out-of-bounds read in super root block parsing super-root inode metadata size is trusted before nilfs_read_inode_common(). Reject super-root inode sizes whose computed on-disk footprint exceeds the filesystem block size. This prevents malformed filesystem images from making nilfs_read_inode_common() read past the end of the super-root block. [ryusuke: clarify the commit title]