What’s Vulnerable › Vulnerabilities
CVE-2024-27407: fs/ntfs3: Fixed overflow check in mi_enum_attr()
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-05-17 · updated 2026-08-04
- Weakness: CWE-120
Description
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed overflow check in mi_enum_attr()
Affected products
- Linux kernel: from 5.15 before 6.1.120; from 6.2 before 6.6.19; from 6.7 before 6.7.7; 6.8-rc1, 6.8-rc2, 6.8-rc3 — fixed in 6.1.120, 6.6.19, 6.7.7
How to fix
Upgrade to a fixed version: Linux kernel 6.1.120, 6.6.19, 6.7.7. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/1c0a95d99b1b2b5d842e5abc7ef7eed1193b60d7
- https://git.kernel.org/stable/c/652cfeb43d6b9aba5c7c4902bed7a7340df131fb
- https://git.kernel.org/stable/c/8c77398c72618101d66480b94b34fe9087ee3d08
- https://git.kernel.org/stable/c/e99faa97359654b6e4e769246c72cf50a57e05b2
- https://git.kernel.org/stable/c/1c0a95d99b1b2b5d842e5abc7ef7eed1193b60d7
- https://git.kernel.org/stable/c/652cfeb43d6b9aba5c7c4902bed7a7340df131fb
- https://git.kernel.org/stable/c/8c77398c72618101d66480b94b34fe9087ee3d08
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
Get alerted when CVE-2024-27407 or the next vulnerability affects your stack