Review reviewHigh

CVE-2024-38623

Linux Linux, linux_kernel, linux kernel

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use variable length array instead of fixed size Should fix smatch warning: ntfs_set_label() error: __builtin_memcpy() 'uni->name' too small (20 vs 256)

CVSS: 7.8
EPSS: 0.53%
CISA KEV: Not listed
Published: 2024.06.21

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.53%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux_kernel, linux kernel
Affected versions: >= 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < a2de301d90b782ac5d7a5fe32995caaee9ab3a0f, >= 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < 3839a9b19a4b70eff6b6ad70446f639f7fd5a3d7, >= 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < 1fe1c9dc21ee52920629d2d9b9bd84358931a8d1, >= 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < cceef44b34819c24bb6ed70dce5b524bd3e368d1, >= 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e < 1997cdc3e727526aa5d84b32f7cbb3f56459b7ef, >= 5.15, >= 4534a70b7056 < a2de301d90b7, >= 4534a70b7056 < 3839a9b19a4b, >= 4534a70b7056 < 1fe1c9dc21ee, >= 4534a70b7056 < cceef44b3481, >= 4534a70b7056 < 1997cdc3e727, >= 5.15 < 5.15.161, >= 5.16 < 6.1.93, >= 6.2 < 6.6.33, >= 6.7 < 6.9.4
Fixed versions: 5.15.161, 6.1.93, 6.6.33, 6.9.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux_kernel, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-129