<story><title>size_t-to-int vulnerability in Linux’s filesystem layer</title><url>https://www.openwall.com/lists/oss-security/2021/07/20/1</url></story><parent_chain></parent_chain><comment><author>mnw21cam</author><text>I love the little nugget in the mitigations section. You can plug the hole for a normal filesystem, but then FUSE filesystems have an additional problem: &amp;quot;if an attacker FUSE-mounts a long directory (longer than 8MB), then systemd exhausts its stack, crashes, and therefore crashes the entire operating system (a kernel panic).&amp;quot;&lt;p&gt;If there&amp;#x27;s one place other than the kernel where truly defensive programming should be applied, it is systemd.</text></comment>
<story><title>size_t-to-int vulnerability in Linux’s filesystem layer</title><url>https://www.openwall.com/lists/oss-security/2021/07/20/1</url></story><parent_chain></parent_chain><comment><author>Faaak</author><text>Anyone knows how to try the PoC (&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.openwall.com&amp;#x2F;lists&amp;#x2F;oss-security&amp;#x2F;2021&amp;#x2F;07&amp;#x2F;20&amp;#x2F;1&amp;#x2F;1&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.openwall.com&amp;#x2F;lists&amp;#x2F;oss-security&amp;#x2F;2021&amp;#x2F;07&amp;#x2F;20&amp;#x2F;1&amp;#x2F;1&lt;/a&gt;) ?&lt;p&gt;For me it crashes into the fork_userns:177&lt;p&gt;PS: don&amp;#x27;t need to downvote. Sometimes managers want you to prove that there&amp;#x27;s a need to patch. It&amp;#x27;s dumb but it&amp;#x27;s what it is</text></comment>