In the Linux kernel, the following vulnerability has been resolved:
fs: ntfs3: check return value of indx_find to avoid infinite loop
We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service (DoS) condition.
A malformed dentry in the ntfs3 filesystem can cause the kernel to hang during the lookup operations. By setting the HAS_SUB_NODE flag in an INDEX_ENTRY within a directory's INDEX_ALLOCATION block and manipulating the VCN pointer, an attacker can cause the indx_find() function to repeatedly read the same block, allocating 4 KB of memory each time. The kernel lacks VCN loop detection and depth limits, causing memory exhaustion and an OOM crash.
This patch adds a return value check for fnd_push() to prevent a memory exhaustion vulnerability caused by infinite loops. When the index exceeds the size of the fnd->nodes array, fnd_push() returns -EINVAL. The indx_find() function checks this return value and stops processing, preventing further memory allocation.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.202-141.223Upgrade perf-debuginfoUpgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 3, 2026 | May 3, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-oracle-6.8Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fde-6.8Upgrade linux-image-genericUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-gcpUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-raspi-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1060-awsUpgrade linux-image-oem-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-intelUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-gke-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-134-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracleUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-186-generic | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub