CVE-2024-50246
fs/ntfs3: Add rough attr alloc_size check
HIGH
7.8
CVSS Score
Published: November 9, 2024 at 10:14 AM UTC
Updated: October 15, 2026 at 12:57 AM UTC
4 products affected across 2 vendorsLinux KernelSIMATIC S7-1500 CPU 1518-4 Pn /dp MFP FirmwareSiplus S7-1500 CPU 1518-4 Pn /dp MFP Firmware
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%
Description
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr alloc_size check
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v < 6.6.605.15 ≤ v < 6.1.1315.15 ≤ v < 6.11.75.15 ≤ v < 6.125.15 ≤ v < 6.6.606.7 ≤ v < 6.11.74534a70b7056fd4b9a1c6db5a4ce3c98546b291e6.12 rc16.12 rc2
Vendor states this is fixed in 2fcae4c2014a40c8ae0fc3d8cca3ba9e168308de (fixed)
Vendor states this is fixed in c4a8ba334262e9a5c158d618a4820e1b9c12495c (fixed)
Vendor states this is fixed in e91fbb21f248bdd8140f343dac32b77b9bc10fec (fixed)
Vendor states this is fixed in effac690913af9a6c3d6cd967281a34e47ed3e4c (fixed)
Vendor states this is fixed in 5.15 (unaffected)
Vendor states this is fixed in 6.1.131 (unaffected)
Vendor states this is fixed in 6.11.7 (unaffected)
Vendor states this is fixed in 6.12 (unaffected)
Vendor states this is fixed in 6.6.60 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (6)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2fcae4c2014a40c8ae0fc3d8cca3ba9e168308dePatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c4a8ba334262e9a5c158d618a4820e1b9c12495cPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e91fbb21f248bdd8140f343dac32b77b9bc10fecSource: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/effac690913af9a6c3d6cd967281a34e47ed3e4cSource: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.htmlSource: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlCVSS
7.8HIGH416baaa9-dc9f-4396-8d5f-8c081fb06d67
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- REQUIRED
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card