An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.122-77.145Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Aug 10, 2023 | May 31, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.41-63.114Upgrade kernel-headersUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-tools-debuginfo | Feb 17, 2025 | Oct 10, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 31, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-5.15.0-1043-azure-fdeUpgrade linux-image-5.15.0-1039-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-79-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-5.15.0-1035-ibmUpgrade linux-image-5.15.0-1025-gkeopUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1030-nvidiaUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-5.15.0-1037-intel-iotgUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1039-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-5.15.0-1035-raspiUpgrade linux-image-5.15.0-1041-awsUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.15.0-1042-awsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-79-lowlatencyUpgrade linux-image-intelUpgrade linux-image-5.15.0-79-genericUpgrade linux-image-kvmUpgrade linux-image-5.15.0-79-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1030-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1040-oracleUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1039-kvmUpgrade linux-image-5.15.0-79-lowlatency-64kUpgrade linux-image-oem-20.04d | Jul 28, 2023 | May 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub