Vulnerability in hfsplus Package: Corruption in Shrinking Truncate
Summary
UVI-2021-1000320: hfsplus: prevent corruption in shrinking truncate. Affects Kernel versions >= 31651c607151f1034cfb57e5a78678bea54c362b, < adbd8a2a8cc05d9e501f93e5c95c59307874cc99. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The hfsplus package is a component of the Linux Kernel ecosystem. It provides support for the HFS+ file system, which is commonly used by macOS. The package allows Linux systems to read and write data on HFS+ formatted drives. However, a vulnerability has been discovered in the package that can lead to corruption when performing a shrinking truncate operation.
Vulnerability Detail
The vulnerability in the hfsplus package arises when a shrinking truncate operation is performed. This operation is used to reduce the size of a file by truncating its content. However, due to a flaw in the package, this operation can result in corruption of the file system. The exact impact and plausibility of an attack exploiting this vulnerability have not been proven yet. The vulnerability was introduced in version v4.19 of the Linux Kernel and has been fixed in version v5.10.38.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The hfsplus package in the Linux Kernel is vulnerable to corruption in shrinking truncate operations. It is recommended to update the Linux Kernel to version v5.10.38 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The hfsplus package is a component of the Linux Kernel ecosystem that provides support for the HFS+ file system used by macOS.
A shrinking truncate operation is used to reduce the size of a file by truncating its content.
The vulnerability can lead to corruption in the file system when performing a shrinking truncate operation.
To fix this vulnerability, update the Linux Kernel to version v5.10.38 or later.
The updated Linux Kernel can be obtained from the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
