Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53732

fs/ntfs3: Fix NULL dereference in ni_write_inode

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in ni_write_inode Syzbot reports a NULL dereference in ni_write_inode. When creating a new inode, if allocation fails in mi_init function (called in mi_format_new function), mi->mrec is set to NULL. In the error path of this inode creation, mi->mrec is later dereferenced in ni_write_inode. Add a NULL check to prevent NULL dereference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to < d4b74482529516477cf7b12502538e51827c699faffected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to < b3152afc0eb864f7c6ecad134a15b577ef7aec77affected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to < b1135fbaf8ebef93df326761ac70ebcc3c2e3d63affected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to < 8dae4f6341e335a09575be60b4fdf697c732a470affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.113 to ≤ 5.15.*unaffected
  • 6.1.81 to ≤ 6.1.*unaffected
  • 6.3.4 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References