CVE-2022-48423CWE-787

CVE-2022-48423

High · published March 19, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2023-03-19T07:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 5.15.875.15.87
linux/linux_kernel≥ 5.16, < 6.0.176.0.17
linux/linux_kernel≥ 6.1, < 6.1.36.1.3
References (6)
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.3 · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54e45702b648b7c0000e90b3e9b890e367e16ea8 · [email protected]https://security.netapp.com/advisory/ntap-20230505-0003/ · [email protected]https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54e45702b648b7c0000e90b3e9b890e367e16ea8 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20230505-0003/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 19 MAR 00:00Z
    In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names
    cvelistv5