CVE-2022-49762
Published: May 1, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ntfs: check overflow when iterating ATTR_RECORDs Kernel iterates over ATTR_RECORDs in mft record in ntfs_attr_find(). Because the ATTR_RECORDs are next to each other, kernel can get the next ATTR_RECORD from end address of current ATTR_RECORD, through current ATTR_RECORD length field. The problem is that during iteration, when kernel calculates the end address of current ATTR_RECORD, kernel may trigger an integer overflow bug in executing `a = (ATTR_RECORD*)((u8*)a + le32_to_cpu(a->length))`. This may wrap, leading to a forever iteration on 32bit systems. This patch solves it by adding some checks on calculating end address of current ATTR_RECORD during iteration.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 5559eb5809353a83a40a1e4e7f066431c7b83020affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 86f36de14dce5802856bb7a5921d74439db00b64affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 45683723f6b53e39e8a4cec0894e61fd6ec71989affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < b612f924f296408d7d02fb4cd01218afd4ed7184affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 957732a09c3828267c2819d31c425aa793dd475b+3 more versions |
Linux | Linux | affected 2.6.12unaffected 0 - < 2.6.12unaffected 4.9.334 - <= 4.9.*unaffected 4.14.300 - <= 4.14.*unaffected 4.19.267 - <= 4.19.*+5 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now