In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix a possible null-pointer dereference in ni_clear()
In a previous commit c1006bd13146, ni->mi.mrec in ni_write_inode() could be NULL, and thus a NULL check is added for this variable.
However, in the same call stack, ni->mi.mrec can be also dereferenced in ni_clear():
ntfs_evict_inode(inode) ni_write_inode(inode, ...) ni = ntfs_i(inode); is_rec_inuse(ni->mi.mrec) -> Add a NULL check by previous commit ni_clear(ntfs_i(inode)) is_rec_inuse(ni->mi.mrec) -> No check
Thus, a possible null-pointer dereference may exist in ni_clear(). To fix it, a NULL check is added in this function.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.15.117-72.142Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Ubuntu | — | Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegraUpgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-ibm-5.15Upgrade linuxUpgrade linux-lowlatencyUpgrade linux-azure-fde-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-raspiUpgrade linux-awsUpgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-gcp-5.15Upgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-ibmUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-aws-5.15Upgrade linux-nvidiaUpgrade linux-nvidia-tegra-igxUpgrade linux-gcp | Jan 6, 2026 | Jan 2, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub