CVE-2024-27407

fs/ntfs3: Fixed overflow check in mi_enum_attr()

State: Published
Severity: 7.8 High
Published: May 17, 2024
Updated: Aug 5, 2026
Reserved: Feb 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fixed overflow check in mi_enum_attr()

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Linux
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
LinuxLinux	4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before e99faa97359654b6e4e769246c72cf50a57e05b2Affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 8c77398c72618101d66480b94b34fe9087ee3d08Affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 1c0a95d99b1b2b5d842e5abc7ef7eed1193b60d7Affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 652cfeb43d6b9aba5c7c4902bed7a7340df131fbAffected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.120 through 6.1.Not affected 6.6.19 through 6.6.Not affected 6.7.7 through 6.7.*Not affected 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.