PT-2024-28086

CVE-2024-38625

·

Published

2024-04-16

·

Updated

2026-10-18

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37
Description The issue is related to the Linux kernel, specifically in the fs/ntfs3 module, where the folio pointer can be NULL if the bmap function is called. This can potentially lead to issues within the kernel.
Recommendations For Linux kernel versions prior to 6.6.37, update to version 6.6.37 or later to resolve the issue. As a temporary workaround, consider restricting access to the bmap function in the fs/ntfs3 module until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
AZL-54987
ECHO-682E-03FF-EE35
MGASA-2024-0263
MGASA-2024-0266
OESA-2024-1836
OESA-2024-1837
OESA-2024-1838
OESA-2024-1839
USN-6999-1
USN-6999-2
USN-7004-1
USN-7005-1
USN-7005-2
USN-7008-1
USN-7029-1
Found an issue in the description? Have something to add? Feel free to write us 👾