Riskcovery

CVE-2024-50248

ntfs3: Add bounds checking to mi_enum_attr()

State
Published
Severity
7.1 High
Published
Nov 9, 2024
Updated
Aug 5, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Add bounds checking to mi_enum_attr()

Added bounds checking to make sure that every attr don't stray beyond valid memory region.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 386613a44b858304a88529ade2ccc1e079a5fc56Affected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 22cdf3be7d34f61a91b9e2966fec3a29f3871398Affected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 809f9b419c75f8042c58434d2bfe849140643e9dAffected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 556bdf27c2dd5c74a9caacbe524b943a6cd42d99Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.1.120 through 6.1.*Not affected
  • 6.6.60 through 6.6.*Not affected
  • 6.11.7 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.