CVE-2022-49763

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix use-after-free in ntfs_attr_find() Patch series "ntfs: fix bugs about Attribute", v2. This patchset fixes three bugs relative to Attribute in record: Patch 1 adds a sanity check to ensure that, attrs_offset field in first mft record loading from disk is within bounds. Patch 2 moves the ATTR_RECORD's bounds checking earlier, to avoid dereferencing ATTR_RECORD before checking this ATTR_RECORD is within bounds. Patch 3 adds an overflow checking to avoid possible forever loop in ntfs_attr_find(). Without patch 1 and p...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 79f3ac7dcd12c05b7539239a4c6fa229a50d786c, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < fb2004bafd1932e08d21ca604ee5844f2b7f212d, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d0006d739738a658a9c29b438444259d9f71dfa0, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 266bd5306286316758e6246ea0345133427b0f62, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b825bfbbaafbe8da2037e3a778ad660c59f9e054, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5330c423b86263ac7883fef0260b9e2229cb531e, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4863f815463034f588a035cfd99cdca97a4f1069, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d85a1bec8e8d552ab13163ca1874dcd82f3d1550, >= 2.6.12, < 4.9.334, >= 4.10 < 4.14.300, >= 4.15 < 4.19.267, >= 4.20 < 5.4.225, >= 5.5 < 5.10.156, >= 5.11 < 5.15.80, >= 5.16 < 6.0.10

Fixed versions

4.9.334, 4.14.300, 4.19.267, 5.4.225, 5.10.156, 5.15.80, 6.0.10

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416