Description
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdr_first_de() The "de_off" and "used" variables come from the disk so they both need to check. The problem is that on 32bit systems if they're both greater than UINT_MAX - 16 then the check does work as intended because of an integer overflow.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
60ce8dfde03558bfc290cd915c60fa243ba2ae84 to < f6d44b1aa46d317e52c21fb9314cfb20dd69e7b0affected60ce8dfde03558bfc290cd915c60fa243ba2ae84 to < 201a2bdda13b619c4927700ffe47d387a30ced50affected60ce8dfde03558bfc290cd915c60fa243ba2ae84 to < 85615aa442830027923fc690390fa74d17b36ae1affected60ce8dfde03558bfc290cd915c60fa243ba2ae84 to < b9982065b82b4177ba3a7a72ce18c84921f7494daffected60ce8dfde03558bfc290cd915c60fa243ba2ae84 to < 6bb81b94f7a9cba6bde9a905cef52a65317a8b04affected
Linux Linux
Default version status: affected
6.2affected0 to < 6.2unaffected6.6.87 to ≤ 6.6.*unaffected6.12.23 to ≤ 6.12.*unaffected6.13.11 to ≤ 6.13.*unaffected6.14.2 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f6d44b1aa46d317e52c21fb9314cfb20dd69e7b0 ↗
- https://git.kernel.org/stable/c/201a2bdda13b619c4927700ffe47d387a30ced50 ↗
- https://git.kernel.org/stable/c/85615aa442830027923fc690390fa74d17b36ae1 ↗
- https://git.kernel.org/stable/c/b9982065b82b4177ba3a7a72ce18c84921f7494d ↗
- https://git.kernel.org/stable/c/6bb81b94f7a9cba6bde9a905cef52a65317a8b04 ↗