In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: validate BOOT sectors_per_clusters
When the NTFS BOOT sectors_per_clusters field is > 0x80, it represents a shift value. Make sure that the shift value is not too large before using it (NTFS max cluster size is 2MB). Return -EVINVAL if it too large.
This prevents negative shift values and shift values that are larger than the field size.
Prevents this UBSAN error:
UBSAN: shift-out-of-bounds in ../fs/ntfs3/super.c:673:16 shift exponent -192 is negative
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.50-23.125Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-riscv-5.15Upgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-raspiUpgrade linux-nvidiaUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-gkeopUpgrade linux-gcpUpgrade linuxUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-kvm | Mar 19, 2025 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub