In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix an NULL dereference bug
The issue here is when this is called from ntfs_load_attr_list(). The "size" comes from le32_to_cpu(attr->res.data_size) so it can't overflow on a 64bit systems but on 32bit systems the "+ 1023" can overflow and the result is zero. This means that the kmalloc will succeed by returning the ZERO_SIZE_PTR and then the memcpy() will crash with an Oops on the next line.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-headers | Aug 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-appleUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-azure-extra | Jun 24, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1054-nvidia-lowlatency | May 17, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub