What’s Vulnerable › Vulnerabilities
CVE-2024-38625: fs/ntfs3: Check 'folio' pointer for NULL
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-06-21 · updated 2026-10-30
- Weakness: CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check 'folio' pointer for NULL It can be NULL if bmap is called.
Affected products
- Linux kernel: from 5.15 before 6.6.33; from 6.7 before 6.9.4 — fixed in 6.6.33, 6.9.4
- Linux: 5.15 — fixed in 6.10
How to fix
Upgrade to a fixed version: Linux kernel 6.6.33, 6.9.4; Linux 6.10. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/1263c0f5019ba248494f7182b18216632c31231c
- https://git.kernel.org/stable/c/1cd6c96219c429ebcfa8e79a865277376c563803
- https://git.kernel.org/stable/c/6c8054d590668629bb2eb6fb4cbf22455d08ada8
- https://git.kernel.org/stable/c/ff1068929459347f9e47f8d14c409dcf938c2641
- https://git.kernel.org/stable/c/1cd6c96219c429ebcfa8e79a865277376c563803
- https://git.kernel.org/stable/c/6c8054d590668629bb2eb6fb4cbf22455d08ada8
- https://git.kernel.org/stable/c/ff1068929459347f9e47f8d14c409dcf938c2641
Get alerted when CVE-2024-38625 or the next vulnerability affects your stack