CVE-2022-30783

Name of the Vulnerable Software and Affected Versions NTFS-3G versions through 2021.8.22

Description The issue is related to an invalid return code in the fuse kern mount function of the libfuse-lite library for the NTFS-3G file system, which enables the interception of libfuse-lite protocol traffic between NTFS-3G and the kernel. Exploitation of this issue may allow an attacker to execute arbitrary code with elevated privileges using a specially crafted request.

Recommendations For NTFS-3G versions through 2021.8.22, consider disabling the fuse kern mount function as a temporary workaround until a patch is available. Restrict access to the libfuse-lite protocol to minimize the risk of exploitation. Avoid using the vulnerable function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.