CVE-2025-22081

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix a couple integer overflows on 32bit systems

On 32bit systems the "off + sizeof(struct NTFS_DE)" addition can have an integer wrapping issue. Fix it by using size_add().

This vulnerability is rated with a Moderate severity for Red Hat because exploiting the flaw requires local privileges to mount a crafted filesystem and only leads to a denial of service, with no vector for remote code execution. Additionally, the issue specifically impacts 32-bit architectures within the NTFS3 kernel driver, a configuration that is not present in supported Red Hat distributions. Because Red Hat Enterprise Linux operates exclusively on 64-bit architectures and does not ship the affected driver code, supported products are not vulnerable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.