NTFS3 Hardened In Linux 7.4 Against Corrupted Or Maliciously-Crafted NTFS Volumes
The NTFS3 driver in Linux 7.4 has been strengthened to better handle corrupted or maliciously-crafted NTFS volumes, with fixes implemented based on fuzzing and Kernel Address Sanitizer reports.
Paragon Software's Konstantin Komarov has released updates for the NTFS3 driver in Linux 7.4, focusing on hardening the system against corrupted or maliciously-crafted NTFS volumes. This open-source contribution serves as an alternative to the modern 'NTFS' read/write kernel driver that was merged with Linux 7.1's 'NTFS Resurrection'.
Security Fixes
The NTFS3 driver now includes numerous fixes to address vulnerabilities discovered through fuzzing and Kernel Address Sanitizer (KASAN) reports. These fixes prevent a possible 64K leak of kernel heap to user-space, stop damaged compressed files from returning uninitialized page cache contents, and resolve a heap overflow issue. Additional fixes address mount writing past the MFT record buffer.
WSL3 Compatibility
Linux 7.4 also introduces a new 'ugm' mount option for WSL3, which is enabled by default. When mounting an NTFS partition with ugm=0, newly created files won't include WSL uid/gid/mode extended attributes that Windows doesn't use, improving compatibility between Linux and Windows systems.
Related
