In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Prevent integer overflow in hdr_first_de()
The "de_off" and "used" variables come from the disk so they both need to check. The problem is that on 32bit systems if they're both greater than UINT_MAX - 16 then the check does work as intended because of an integer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel6.12Upgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.23-29.97Upgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade python3-perf6.12Upgrade kernel-libbpf-static | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-symsUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade dtb-appleUpgrade dtb-armUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-xilinx | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-generic-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-lowlatency-6.11Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-azure-6.11Upgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1041-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.8.0-86-genericUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-azureUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-azure-fips-6.8Upgrade linux-image-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-fde-edgeUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-6.11.0-1024-oem | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub