In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
Here is a BUG report from syzbot:
BUG: KASAN: slab-out-of-bounds in hdr_delete_de+0xe0/0x150 fs/ntfs3/index.c:806 Read of size 16842960 at addr ffff888079cc0600 by task syz-executor934/3631
Call Trace: memmove+0x25/0x60 mm/kasan/shadow.c:54 hdr_delete_de+0xe0/0x150 fs/ntfs3/index.c:806 indx_delete_entry+0x74f/0x3670 fs/ntfs3/index.c:2193 ni_remove_name+0x27a/0x980 fs/ntfs3/frecord.c:2910 ntfs_unlink_inode+0x3d4/0x720 fs/ntfs3/inode.c:1712 ntfs_rename+0x41a/0xcb0 fs/ntfs3/namei.c:276
Before using the meta-data in struct INDEX_HDR, we need to check index header valid or not. Otherwise, the corruptedi (or malicious) fs image can cause out-of-bounds access which could make kernel panic.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.117-72.142 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-gkeUpgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegraUpgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-aws-5.15Upgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-ibmUpgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-nvidia | Jan 6, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub