What’s Vulnerable › Vulnerabilities

CVE-2024-38624: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-21 · updated 2026-06-17
• Weakness: CWE-190

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow For example, in the expression: vbo = 2 * vbo + skip

Affected products

• Linux kernel: from 5.15 before 5.15.161; from 5.16 before 6.1.93; from 6.2 before 6.6.33; from 6.7 before 6.9.4 — fixed in 5.15.161, 6.1.93, 6.6.33, 6.9.4

How to fix

Upgrade to a fixed version: Linux kernel 5.15.161, 6.1.93, 6.6.33, 6.9.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/109d85a98345ee52d47c650405dc51bdd2bc7d40
• https://git.kernel.org/stable/c/2d1ad595d15f36a925480199bf1d9ad72614210b
• https://git.kernel.org/stable/c/847db4049f6189427ddaefcfc967d4d235b73c57
• https://git.kernel.org/stable/c/98db3155b54d3684ef0ab5bfa0b856d13f65843d
• https://git.kernel.org/stable/c/e931f6b630ffb22d66caab202a52aa8cbb10c649
• https://git.kernel.org/stable/c/109d85a98345ee52d47c650405dc51bdd2bc7d40
• https://git.kernel.org/stable/c/2d1ad595d15f36a925480199bf1d9ad72614210b
• https://git.kernel.org/stable/c/847db4049f6189427ddaefcfc967d4d235b73c57
• https://git.kernel.org/stable/c/98db3155b54d3684ef0ab5bfa0b856d13f65843d
• https://git.kernel.org/stable/c/e931f6b630ffb22d66caab202a52aa8cbb10c649

Get alerted when CVE-2024-38624 or the next vulnerability affects your stack