CVE-2024-27407CWE-120

CVE-2024-27407

High · published May 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fixed overflow check in mi_enum_attr()

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00284 · 19.8th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-05-17T16:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 6.1.1206.1.120
linux/linux_kernel≥ 6.2, < 6.6.196.6.19
linux/linux_kernel≥ 6.7, < 6.7.76.7.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
https://git.kernel.org/stable/c/1c0a95d99b1b2b5d842e5abc7ef7eed1193b60d7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/652cfeb43d6b9aba5c7c4902bed7a7340df131fb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8c77398c72618101d66480b94b34fe9087ee3d08 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e99faa97359654b6e4e769246c72cf50a57e05b2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1c0a95d99b1b2b5d842e5abc7ef7eed1193b60d7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/652cfeb43d6b9aba5c7c4902bed7a7340df131fb · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8c77398c72618101d66480b94b34fe9087ee3d08 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 17 MAY 11:40Z
    fs/ntfs3: Fixed overflow check in mi_enum_attr()
    cvelistv5