PT-2023-1533
CVE-2023-26607
·
Published
2022-11-16
·
Updated
2026-10-21
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel version 6.0.8
Description
The issue is related to an out-of-bounds read in the
ntfs attr find() function in fs/ntfs/attrib.c. This can potentially allow an attacker to cause a denial of service.Recommendations
For Linux kernel version 6.0.8, consider disabling the
ntfs attr find() function as a temporary workaround until a patch is available. Restrict access to the fs/ntfs/attrib.c module to minimize the risk of exploitation.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾