Description
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read. Add index bounds checking to prevent the OOB access.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
522e010b58379fbe19b38fdef5016bca0c3cf405 to < 1113fa5b01a47a1a4cdbb9c695197ca6215f02a8affected522e010b58379fbe19b38fdef5016bca0c3cf405 to < 61415ffa365d2eca6986914afd0d1412444aa1ddaffected522e010b58379fbe19b38fdef5016bca0c3cf405 to < bd77afca2ae9b6d44d37902e3ad672ebb028b070affected522e010b58379fbe19b38fdef5016bca0c3cf405 to < c694f8ea2611e7413b3f04ee47e04a9b7b45817baffected522e010b58379fbe19b38fdef5016bca0c3cf405 to < ff05a98150ebb2b03919a9c05c576681e86abbb7affected522e010b58379fbe19b38fdef5016bca0c3cf405 to < a93980141253c932aa6ae5d4422d90e0162dc774affected522e010b58379fbe19b38fdef5016bca0c3cf405 to < 7160a57192fb16d7a6fa9b7f5c7ac341d2444a89affected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1113fa5b01a47a1a4cdbb9c695197ca6215f02a8 ↗
- https://git.kernel.org/stable/c/61415ffa365d2eca6986914afd0d1412444aa1dd ↗
- https://git.kernel.org/stable/c/bd77afca2ae9b6d44d37902e3ad672ebb028b070 ↗
- https://git.kernel.org/stable/c/c694f8ea2611e7413b3f04ee47e04a9b7b45817b ↗
- https://git.kernel.org/stable/c/ff05a98150ebb2b03919a9c05c576681e86abbb7 ↗
- https://git.kernel.org/stable/c/a93980141253c932aa6ae5d4422d90e0162dc774 ↗
- https://git.kernel.org/stable/c/7160a57192fb16d7a6fa9b7f5c7ac341d2444a89 ↗