CVE-2025-22080

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Prevent integer overflow in hdr_first_de()

The "de_off" and "used" variables come from the disk so they both need to check. The problem is that on 32bit systems if they're both greater than UINT_MAX - 16 then the check does work as intended because of an integer overflow.

This vulnerability is rated as Moderate severity because an attacker requires local access to mount a specially crafted NTFS filesystem on a 32-bit architecture, with the potential impact limited to a denial of service. Red Hat Enterprise Linux releases are not affected by this flaw because the vulnerable ntfs3 driver code is not present in supported kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.