Riskcovery

CVE-2024-41018

fs/ntfs3: Add a check for attr_names and oatbl

State
Published
Severity
7.8 High
Published
Jul 29, 2024
Updated
Aug 5, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Add a check for attr_names and oatbl

Added out-of-bound checking for *ane (ATTR_NAME_ENTRY).

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e0b64e4ad2eb013fd3299e34e7fe5e19f321e140 to before f3124d51e4e7b56a732419d8dc270e807252334fAffected
  • 865e7a7700d930d34895a70f8af2eb4e778a5b0e to before c114d2b88f8b226d4b2acf5a1ba0412cde6c31ddAffected
  • 865e7a7700d930d34895a70f8af2eb4e778a5b0e to before 9b71f820f7168f1eab8378c80c7ea8a022a475bcAffected
  • 865e7a7700d930d34895a70f8af2eb4e778a5b0e to before 702d4930eb06dcfda85a2fa67e8a1a27bfa2a845Affected
  • 653687cca0fdbf426c078b46c377c57bee49e837Affected
  • 6.6.19 to before 6.6.43Affected
  • 6.7.7 to before 6.8Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.6.43 through 6.6.*Not affected
  • 6.9.12 through 6.9.*Not affected
  • 6.10.2 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.