CVE-2022-48424

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.3

Description The issue is related to the lack of validation of the attribute name offset in the fs/ntfs3/inode.c module of the Linux kernel. This can lead to an unhandled page fault. The vulnerability is also associated with the absence of checks for valid attribute sizes in the ntfs read mft() function, which can allow an attacker to cause a denial of service.

Recommendations For versions prior to 6.1.3, update to version 6.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the fs/ntfs3/inode.c module to minimize the risk of exploitation.