Linux Kernel NTFS3 BOOT Sector Validation Vulnerability Allowing Shift-Out-Of-Bounds Errors

A vulnerability in the Linux kernel's NTFS3 file system handling has been addressed. The issue arose in the validation of the BOOT sectors' 'sectors_per_cluster' field. When this field exceeded a certain value, it could lead to negative shift values or values larger than the field size, causing a shift-out-of-bounds error. The vulnerability has been resolved by ensuring that the shift value does not exceed a specified limit before it is used, with invalid values now returning an error. This fix prevents potential undefined behavior by addressing the root cause of the shift-out-of-bounds error.

Impact

Exploitation of this vulnerability could lead to a shift-out-of-bounds error, causing undefined behavior in the kernel.