CVE-2024-50248

ntfs3: Add bounds checking to mi_enum_attr()

EPSS 0.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

09 Nov 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Add bounds checking to mi_enum_attr() Added bounds checking to make sure that every attr don't stray beyond valid memory region.

Affected products

Linux · Linux

References

https://git.kernel.org/stable/c/22cdf3be7d34f61a91b9e2966fec3a29f3871398 https://git.kernel.org/stable/c/386613a44b858304a88529ade2ccc1e079a5fc56 https://git.kernel.org/stable/c/556bdf27c2dd5c74a9caacbe524b943a6cd42d99 https://git.kernel.org/stable/c/809f9b419c75f8042c58434d2bfe849140643e9d https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html