CVE-2022-49763

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel, specifically in the ntfs attr find() function. This issue can be triggered when the kernel loads the first MFT record and fails to check if the attrs offset field is a valid value. If the attrs offset field is larger than the bytes allocated field, it may cause an out-of-bounds read bug, reported as a use-after-free bug, when the kernel tries to access the corresponding MFT record's attribute. The issue is resolved by adding a sanity check between the attrs offset field and the bytes allocated field after loading the first MFT record.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.