What’s Vulnerable › Vulnerabilities

CVE-2023-52640: fs/ntfs3: Fix oob in ntfs_listxattr

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-03 · updated 2026-08-04
• Weakness: CWE-129

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix oob in ntfs_listxattr The length of name cannot exceed the space occupied by ea.

Affected products

• Linux kernel: before 5.15.150; from 5.16 before 6.1.80; from 6.2 before 6.6.19; from 6.7 before 6.7.7; 6.8-rc1, 6.8-rc2, 6.8-rc3 — fixed in 5.15.150, 6.1.80, 6.6.19, 6.7.7

How to fix

Upgrade to a fixed version: Linux kernel 5.15.150, 6.1.80, 6.6.19, 6.7.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0830c5cf19bdec50d0ede4755ddc463663deb21c
• https://git.kernel.org/stable/c/52fff5799e3d1b5803ecd2f5f19c13c65f4f7b23
• https://git.kernel.org/stable/c/6ed6cdbe88334ca3430c5aee7754dc4597498dfb
• https://git.kernel.org/stable/c/731ab1f9828800df871c5a7ab9ffe965317d3f15
• https://git.kernel.org/stable/c/a585faf0591548fe0920641950ebfa8a6eefe1cd
• https://git.kernel.org/stable/c/0830c5cf19bdec50d0ede4755ddc463663deb21c
• https://git.kernel.org/stable/c/52fff5799e3d1b5803ecd2f5f19c13c65f4f7b23
• https://git.kernel.org/stable/c/6ed6cdbe88334ca3430c5aee7754dc4597498dfb
• https://git.kernel.org/stable/c/731ab1f9828800df871c5a7ab9ffe965317d3f15
• https://git.kernel.org/stable/c/a585faf0591548fe0920641950ebfa8a6eefe1cd

Get alerted when CVE-2023-52640 or the next vulnerability affects your stack