Linux Kernel HPFS Uninitialized Buffer Vulnerability Leading to Crash

A vulnerability in the Linux kernel's HPFS (High Performance File System) implementation can cause a system crash. This issue arises when the function 'hpfs_map_dnode_bitmap' fails, leaving the code to call 'hpfs_brelse4' on an uninitialized buffer. The problem has been addressed in the Linux kernel stable tree.

Impact

The vulnerability can lead to a system crash, causing a denial of service.

Reproduction

The vulnerability can be reproduced by triggering a failure in the 'hpfs_map_dnode_bitmap' function while the 'hpfs_check_free_dnodes' function is executing. This failure will cause 'hpfs_brelse4' to be called with an uninitialized buffer, leading to a crash.

Remediation

Users can upgrade to the latest version of the Linux kernel to address this vulnerability.