CVE-2022-48502

kernel: ntfs3 subsystem does not properly check for correctness during disk reads

Loading…

Severity

Moderate

Red Hat Product Security

7.1

CVSS 3.1

Review impact separately from score.

Published · October 10, 2022

Updated · November 22, 2025

Description

A flaw was found in the Linux kernel’s ntfs3 subsystem, which does not properly check for correctness during disk reads. This issue leads to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

Statement

No shipped kernel versions were seen affected by this problem. These files are not built in our source code.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE not specified