What’s Vulnerable › Vulnerabilities

CVE-2024-41018: fs/ntfs3: Add a check for attr_names and oatbl

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-29 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add a check for attr_names and oatbl Added out-of-bound checking for *ane (ATTR_NAME_ENTRY).

Affected products

• Linux kernel: from 6.6.19 before 6.6.43; from 6.7.7 before 6.8; from 6.8.1 before 6.9.12; from 6.10 before 6.10.2; 6.8, 6.8-rc4, 6.8-rc5, 6.8-rc6, 6.8-rc7 — fixed in 6.10.2, 6.6.43, 6.8, 6.9.12

How to fix

Upgrade to a fixed version: Linux kernel 6.10.2, 6.6.43, 6.8, 6.9.12. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/702d4930eb06dcfda85a2fa67e8a1a27bfa2a845
• https://git.kernel.org/stable/c/9b71f820f7168f1eab8378c80c7ea8a022a475bc
• https://git.kernel.org/stable/c/c114d2b88f8b226d4b2acf5a1ba0412cde6c31dd
• https://git.kernel.org/stable/c/f3124d51e4e7b56a732419d8dc270e807252334f
• https://git.kernel.org/stable/c/702d4930eb06dcfda85a2fa67e8a1a27bfa2a845
• https://git.kernel.org/stable/c/9b71f820f7168f1eab8378c80c7ea8a022a475bc
• https://git.kernel.org/stable/c/c114d2b88f8b226d4b2acf5a1ba0412cde6c31dd
• https://git.kernel.org/stable/c/f3124d51e4e7b56a732419d8dc270e807252334f

Get alerted when CVE-2024-41018 or the next vulnerability affects your stack