CVE-2022-49553

fs/ntfs3: validate BOOT sectors_per_clusters

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: validate BOOT sectors_per_clusters

When the NTFS BOOT sectors_per_clusters field is > 0x80, it represents a shift value. Make sure that the shift value is not too large before using it (NTFS max cluster size is 2MB). Return -EVINVAL if it too large.

This prevents negative shift values and shift values that are larger than the field size.

Prevents this UBSAN error:

UBSAN: shift-out-of-bounds in ../fs/ntfs3/super.c:673:16 shift exponent -192 is negative

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	82cae269cfa953032fbb8980a7d554d60fb00b17 to before 58cf68a1886d14ffdc5c892ce483a82156769e88Affected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 4746c49b11b2403f5b5b07c6eac9e60663dcd9a3Affected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before a2b6986316a2d106f6951e76db70fa4b2fde64a9Affected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before a3b774342fa752a5290c0de36375289dfcf4a260Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.45 through 5.15.Not affected 5.17.13 through 5.17.Not affected 5.18.2 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.