In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_insert_into_buffer indx_insert_into_buffer() computes used = used1 - to_copy - sp…
Critical CVSS 9.8
Summary
In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_insert_into_buffer indx_insert_into_buffer() computes used = used1 - to_copy - sp_size; memmove(de_t, Add2Ptr(sp, sp_size), used - le32_to_cpu(hdr1->de_off)); where sp and sp_size come from hdr_find_split(). hdr_find_split() walks entries by le16_to_cpu(e->size) without validating that each step stays within hdr->used or that the size field is at least sizeof(struct NTFS_D…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1758a564b6ebe7f4a82f23c9851d1cae15549457
- https://git.kernel.org/stable/c/4c2f648139a0a86f4486170f72e24fedd4fae74e
- https://git.kernel.org/stable/c/7bf74e6baf810fe325f111996496c678fc6e244f
- https://git.kernel.org/stable/c/8e4ba5a38c155bb3c1c11e63cd285b178cdb099e
- https://git.kernel.org/stable/c/b232eb5c9fe11ec2368e9b565db69c724c35fbd2
- https://git.kernel.org/stable/c/f1df9d771df47aa40de6d70949c28720ae1e430d
- https://git.kernel.org/stable/c/f3624cc069195001c88df7a291af215f2133ff2c
Timeline
- nvd_ingest NVD