CVE-2022-48502

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an o...

Original description

The description as published by the source.

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2022-48502 linux Fixed in: 6.1.52-1
Ubuntu UBUNTU-CVE-2022-48502 linux-hwe-edge

References

advisory github.com
advisory nvd.nist.gov
advisory security.netapp.com
web cdn.kernel.org
web git.kernel.org
web syzkaller.appspot.com