Linux Kernel FUSE Slab-Out-Of-Bounds Write Vulnerability

A slab-out-of-bounds write vulnerability has been identified in the Linux kernel's FUSE (Filesystem in Userspace) implementation. This issue arises in the 'fuse_dev_do_write' function when the number of bytes to be retrieved exceeds the upper limit set by 'fc->max_pages', particularly when an offset is involved. The vulnerability has been addressed by adding a loop termination condition to prevent such buffer overruns.

Impact

Exploitation of this vulnerability leads to a slab-out-of-bounds write, which can potentially be exploited to overwrite memory and execute arbitrary code.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched. The specific commit addressing this issue is available in the Linux kernel stable tree.