CVE-2024-50242

fs/ntfs3: Additional check in ntfs_file_release

HIGH
7.8
CVSS Score
Published: November 9, 2024 at 10:14 AM UTC
Updated: June 17, 2026 at 08:03 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in ntfs_file_release

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 6.6.605.15 ≤ v < 5.15.1785.15 ≤ v < 6.1.1195.15 ≤ v < 6.11.75.15 ≤ v < 6.125.15 ≤ v < 6.6.606.7 ≤ v < 6.11.74534a70b7056fd4b9a1c6db5a4ce3c98546b291e6.12 rc16.12 rc2
Vendor states this is fixed in 031d6f608290c847ba6378322d0986d08d1a645a (fixed)
Vendor states this is fixed in 542532afe249588ae88d8409d4bf861c315f8862 (fixed)
Vendor states this is fixed in 550ef40fa6366d5d11b122e5f36b1f9aa20c087e (fixed)
Vendor states this is fixed in 82685eb6ca1db2bd11190451085bcb86ed03aa24 (fixed)
Vendor states this is fixed in d1ac7e2620302e3e49573df39bd4e868e8b4962a (fixed)
Vendor states this is fixed in 5.15 (unaffected)
Vendor states this is fixed in 5.15.178 (unaffected)
Vendor states this is fixed in 6.1.119 (unaffected)
Vendor states this is fixed in 6.11.7 (unaffected)
Vendor states this is fixed in 6.12 (unaffected)
Vendor states this is fixed in 6.6.60 (unaffected)

References (6)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card