CVE-2025-22081

fs/ntfs3: Fix a couple integer overflows on 32bit systems

State: Published
Severity: 7.8 High
Published: Apr 16, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix a couple integer overflows on 32bit systems

On 32bit systems the "off + sizeof(struct NTFS_DE)" addition can have an integer wrapping issue. Fix it by using size_add().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
LinuxLinux	82cae269cfa953032fbb8980a7d554d60fb00b17 to before 0922d86a7a6032cb1694eab0b44b861bd33ba8d5Affected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 1a14e9718a19d2e88de004a1360bfd7a86ed1395Affected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 0dfe700fbd3525f30a36ffbe390a5b9319bd009aAffected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 284c9549386e9883855fb82b730303bb2edea9deAffected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 0538f52410b619737e663167b6a2b2d0bc1a589dAffected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 4d0f4f42922a832388a0c2fe5204c0a1037ff786Affected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 5ad414f4df2294b28836b5b7b69787659d6aa708Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.180 through 5.15.Not affected 6.1.134 through 6.1.Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

82cae269cfa953032fbb8980a7d554d60fb00b17 to before 0922d86a7a6032cb1694eab0b44b861bd33ba8d5Affected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before 1a14e9718a19d2e88de004a1360bfd7a86ed1395Affected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before 0dfe700fbd3525f30a36ffbe390a5b9319bd009aAffected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before 284c9549386e9883855fb82b730303bb2edea9deAffected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before 0538f52410b619737e663167b6a2b2d0bc1a589dAffected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before 4d0f4f42922a832388a0c2fe5204c0a1037ff786Affected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before 5ad414f4df2294b28836b5b7b69787659d6aa708Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.180 through 5.15.*Not affected
6.1.134 through 6.1.*Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.