CVE-2023-52640

A vulnerability was found in the ntfs3 function in ntfs_list_ea() in the Linux kernel, where a missing check on the length of an attribute name could exceed the expected size of the extended attribute structure and cause an out-of-bounds error. This issue could result in memory corruption, data leakage, crashes, and arbitrary code execution.

Red Hat Enterprise Linux products are not affected by this vulnerability as Red Hat does not build or ship ntfs3 in any version of RHEL.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.