NetSight
IP …
high7.8

CVE-2022-48425

In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.

Impact

In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15 before 5.15.113
from 5.16 before 6.1.33
from 6.2 before 6.3.4

Weakness classification

CWE-763

References