In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix OOB read in indx_insert_into_buffer
Syzbot reported a OOB read bug:
BUG: KASAN: slab-out-of-bounds in indx_insert_into_buffer+0xaa3/0x13b0 fs/ntfs3/index.c:1755 Read of size 17168 at addr ffff8880255e06c0 by task syz-executor308/3630
Call Trace: <TASK> memmove+0x25/0x60 mm/kasan/shadow.c:54 indx_insert_into_buffer+0xaa3/0x13b0 fs/ntfs3/index.c:1755 indx_insert_entry+0x446/0x6b0 fs/ntfs3/index.c:1863 ntfs_create_inode+0x1d3f/0x35c0 fs/ntfs3/inode.c:1548 ntfs_create+0x3e/0x60 fs/ntfs3/namei.c:100 lookup_open fs/namei.c:3413 [inline]
If the member struct INDEX_BUFFER *index of struct indx_node is incorrect, that is, the value of __le32 used is greater than the value of __le32 total in struct INDEX_HDR. Therefore, OOB read occurs when memmove is called in indx_insert_into_buffer(). Fix this by adding a check in hdr_find_e().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.117-72.142Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linux-raspiUpgrade linux-awsUpgrade linux-aws-5.15Upgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-5.15Upgrade linux-gkeUpgrade linuxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-ibm-5.15Upgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-realtimeUpgrade linux-lowlatencyUpgrade linux-oracleUpgrade linux-azureUpgrade linux-gkeopUpgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-oracle-5.15Upgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-xilinx-zynqmpUpgrade linux-azure-5.15Upgrade linux-intel-iotg-5.15 | Jan 6, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub