Linux Kernel JFFS2 Memory Corruption Vulnerability in Rtime Decompression

A memory corruption vulnerability has been identified in the Linux kernel's JFFS2 file system, specifically within the rtime decompression routine. The issue arises because the routine fails to properly check bounds during the entire decompression process. As a result, if the compressed data is corrupted, it can lead to memory corruption outside the designated decompression buffer. This vulnerability has been addressed by adding the necessary bounds checks to prevent such memory corruption.

Impact

Exploitation of this vulnerability could lead to arbitrary memory corruption, potentially allowing for further exploitation such as arbitrary code execution or escalation of privileges.