CVE-2024-41018

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add a check for attr_names and oatbl Added out-of-bound checking for *ane (ATTR_NAME_ENTRY).

CVSS Metrics

• v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.03%• Percentile: 8%

Affected Systems

• linux•linux

  ≥ e0b64e4ad2eb013fd3299e34e7fe5e19f321e140, < f3124d51e4e7b56a732419d8dc270e807252334f | ≥ 865e7a7700d930d34895a70f8af2eb4e778a5b0e, < c114d2b88f8b226d4b2acf5a1ba0412cde6c31dd | ≥ 865e7a7700d930d34895a70f8af2eb4e778a5b0e, < 9b71f820f7168f1eab8378c80c7ea8a022a475bc | ≥ 865e7a7700d930d34895a70f8af2eb4e778a5b0e, < 702d4930eb06dcfda85a2fa67e8a1a27bfa2a845 | 653687cca0fdbf426c078b46c377c57bee49e837 | ≥ 6.6.19, < 6.6.43 | ≥ 6.7.7, < 6.8 | 6.8

• linux•linux_kernel

  ≥ 6.6.19, < 6.6.43 | ≥ 6.7.7, < 6.8 | ≥ 6.8.1, < 6.9.12 | ≥ 6.10, < 6.10.2 | 6.8 | 6.8:rc4 | 6.8:rc5 | 6.8:rc6 | 6.8:rc7

References (4)

• https://git.kernel.org/stable/c/f3124d51e4e7b56a732419d8dc270e807252334f
• https://git.kernel.org/stable/c/c114d2b88f8b226d4b2acf5a1ba0412cde6c31dd
• https://git.kernel.org/stable/c/9b71f820f7168f1eab8378c80c7ea8a022a475bc
• https://git.kernel.org/stable/c/702d4930eb06dcfda85a2fa67e8a1a27bfa2a845