CVE-2024-46777

A flaw was found in the Linux kernel's Universal Disk Format (UDF) filesystem. A local attacker could craft a malicious UDF filesystem with excessive partition lengths. When an affected system attempts to mount this filesystem, it could lead to an overflow of the 32-bit block number or an inability to safely index bits in a block bitmap, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce exposure, avoid mounting untrusted UDF filesystem images. If UDF support is not essential, the udf kernel module can be blacklisted to prevent its automatic loading.

To blacklist the udf module:

1. Create /etc/modprobe.d/blacklist-udf.conf with:

   blacklist udf
   install udf /bin/true
   

2. Regenerate the initramfs: dracut -f -v $(uname -r) (for RHEL 8/9) or dracut -f -v (for RHEL 7).
3. A system reboot is required for the changes to take effect. This action may affect systems that legitimately utilize UDF filesystems.