CVE-2022-49166
ntfs: add sanity check on allocation size
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Feb 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
ntfs: add sanity check on allocation size
ntfs_read_inode_mount invokes ntfs_malloc_nofs with zero allocation
size. It triggers one BUG in the __ntfs_malloc function.
Fix this by adding sanity check on ni->attr_list_size.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/07793d2e55563124108762f4e5f811db92ffe02fhttps://git.kernel.org/stable/c/115fae2c1566eacc5ad2055f72521354612e72c3https://git.kernel.org/stable/c/21d490232f323ed4053eb9924615e6fea291f154https://git.kernel.org/stable/c/24ab2d4ef52c2dbb62a60844b87fc8872383407ahttps://git.kernel.org/stable/c/714fbf2647b1a33d914edd695d4da92029c7e7c0https://git.kernel.org/stable/c/b230f2d9441a34c7f483d39ab78519bcf73cc2e0https://git.kernel.org/stable/c/bd8d7daa0e53b184a2f3c6e0d47330780d0a0650https://git.kernel.org/stable/c/c641087d381a08363e5f14179bc6b0a23eca7c47https://git.kernel.org/stable/c/fe41ad8be036a3de3e4bdde709551aeb4de2fe7d