CVE-2024-50248

ntfs3: Add bounds checking to mi_enum_attr()

EPSS 0.2%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 nov 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Add bounds checking to mi_enum_attr() Added bounds checking to make sure that every attr don't stray beyond valid memory region.

Produtos afetados

Linux · Linux

Referências

https://git.kernel.org/stable/c/22cdf3be7d34f61a91b9e2966fec3a29f3871398 https://git.kernel.org/stable/c/386613a44b858304a88529ade2ccc1e079a5fc56 https://git.kernel.org/stable/c/556bdf27c2dd5c74a9caacbe524b943a6cd42d99 https://git.kernel.org/stable/c/809f9b419c75f8042c58434d2bfe849140643e9d https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html