CVE-2024-39472 xfs: fix log recovery buffer allocation for the legacy h_size fixup

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses Buffer Overflow and Log Recovery Issues in Recent CVEs Microsoft has published information on two vulnerabilities affecting their systems: CVE-2024-40902 and CVE-2024-39472. CVE-2024-40902, published on July 12, 2024, addresses a buffer overflow issue related to invalid extended attributes, while CVE-2024-39472, published on July 5, 2024, resolves a log recovery buffer allocation problem in legacy systems. 2 sources 48