In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate BOOT record_size When the NTFS BOOT record_size field < 0, it represents a shift value. However, there is no s…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate BOOT record_size When the NTFS BOOT record_size field < 0, it represents a shift value. However, there is no sanity check on the shift result and the sbi->record_bits calculation through blksize_bits() assumes the size always > 256, which could lead to NPD while mounting a malformed NTFS image. [ 318.675159] BUG: kernel NULL pointer dereference, address: 0000000000000158 [ 318.675682] #PF: supervisor rea…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0b66046266690454dc04e6307bcff4a5605b42a1 Patch
- https://git.kernel.org/stable/c/8702e0dc987014f6d77740b693340f91344fd0ae Patch
- https://git.kernel.org/stable/c/af7a195deae349f15baa765d000a5188920d61dd Patch
- https://git.kernel.org/stable/c/db91a9c59162a9c56792ded88160442c0a2dabd5 Patch
Timeline
- nvd_ingest NVD