CVE-2022-49553

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: validate BOOT sectors_per_clusters

When the NTFS BOOT sectors_per_clusters field is > 0x80, it represents a shift value. Make sure that the shift value is not too large before using it (NTFS max cluster size is 2MB). Return -EVINVAL if it too large.

This prevents negative shift values and shift values that are larger than the field size.

Prevents this UBSAN error:

UBSAN: shift-out-of-bounds in ../fs/ntfs3/super.c:673:16 shift exponent -192 is negative

This vulnerability presents minimal risk to Red Hat Enterprise Linux environments because the affected NTFS file system implementation is not included in supported enterprise kernel builds. Exploitation would require mounting a maliciously structured volume, an action restricted to privileged local users with administrative capabilities. Consequently, standard production deployments are not exposed to denial-of-service or system instability from this issue.