CVE-2024-52560: fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-27 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr() Extended the `mi_enum_attr()` function interface with an additional parameter, `struct ntfs_inode *ni`, to allow marking the inode as bad as soon as an error is detected.

Affected products

Linux kernel: from 5.15 before 6.13.4 — fixed in 6.13.4
Linux: 5.15 — fixed in 6.14

How to fix

Upgrade to a fixed version: Linux kernel 6.13.4; Linux 6.14. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/2afd4d267e6dbaec8d3ccd4f5396cb84bc67aa2e
https://git.kernel.org/stable/c/4ff4b6b9e85cfe879773ca78d91b1090a3ce19ac
https://git.kernel.org/stable/c/acfb75eeb3304d08cbd5b5a8c77379459ec6a04e
https://git.kernel.org/stable/c/bbab6587559d1a22f2c28d93ff4ca744d3667c8f
https://git.kernel.org/stable/c/d9c699f2c4dc174940ffe8600b20c267897da155

Get alerted when CVE-2024-52560 or the next vulnerability affects your stack