CVE-2022-49166

ntfs: add sanity check on allocation size

MEDIUM

5.5

CVSS Score

Published: February 26, 2025 at 01:55 AM UTC

Updated: June 17, 2026 at 05:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: add sanity check on allocation size ntfs_read_inode_mount invokes ntfs_malloc_nofs with zero allocation size. It triggers one BUG in the __ntfs_malloc function. Fix this by adding sanity check on ni->attr_list_size.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.9.3112.6.12 ≤ v < 4.14.2762.6.12 ≤ v < 4.19.2382.6.12 ≤ v < 4.9.3112.6.12 ≤ v < 5.10.1102.6.12 ≤ v < 5.15.332.6.12 ≤ v < 5.16.192.6.12 ≤ v < 5.17.22.6.12 ≤ v < 5.182.6.12 ≤ v < 5.4.1894.10 ≤ v < 4.14.2764.15 ≤ v < 4.19.2384.20 ≤ v < 5.4.1895.11 ≤ v < 5.15.335.16 ≤ v < 5.16.195.17 ≤ v < 5.17.25.5 ≤ v < 5.10.1101da177e4c3f41524e886b7f1b8a0c1fc7321cac2 2.6.12

Vendor states this is fixed in 07793d2e55563124108762f4e5f811db92ffe02f (fixed)

Vendor states this is fixed in 115fae2c1566eacc5ad2055f72521354612e72c3 (fixed)

Vendor states this is fixed in 21d490232f323ed4053eb9924615e6fea291f154 (fixed)

Vendor states this is fixed in 24ab2d4ef52c2dbb62a60844b87fc8872383407a (fixed)

Vendor states this is fixed in 714fbf2647b1a33d914edd695d4da92029c7e7c0 (fixed)

Vendor states this is fixed in b230f2d9441a34c7f483d39ab78519bcf73cc2e0 (fixed)

Vendor states this is fixed in bd8d7daa0e53b184a2f3c6e0d47330780d0a0650 (fixed)

Vendor states this is fixed in c641087d381a08363e5f14179bc6b0a23eca7c47 (fixed)

Vendor states this is fixed in fe41ad8be036a3de3e4bdde709551aeb4de2fe7d (fixed)

Vendor states this is fixed in 2.6.12 (unaffected)

Vendor states this is fixed in 4.14.276 (unaffected)

Vendor states this is fixed in 4.19.238 (unaffected)