Log in Start free

Vulnerability · Published Apr 2, 2024 · Assigned by Linux

CVE-2023-52631fs/ntfs3: Fix an NULL dereference bug

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 86.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix an NULL dereference bug The issue here is when this is called from ntfs_load_attr_list(). The "size" comes from le32_to_cpu(attr->res.data_size) so it can't overflow on a 64bit systems but on 32bit systems the "+ 1023" can overflow and the result is zero. This means that the kmalloc will succeed by returning the ZERO_SIZE_PTR and then the memcpy() will crash with an Oops on the next line.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.82-1DEBIAN-CVE-2023-52631
Debian:13linux6.7.7-1DEBIAN-CVE-2023-52631
Debian:14linux6.7.7-1DEBIAN-CVE-2023-52631
Ubuntu:22.04:LTSlinux5.15.0-106.116UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux5.15.0-106.116USN-6766-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-aws5.15.0-1061.67UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-aws5.15.0-1061.67USN-6766-3
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1023.23~22.04.1USN-6895-3
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1023.23~22.04.1UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-azure5.15.0-1063.72USN-6766-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1063.72UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1024.25~22.04.1USN-6895-2
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1024.25~22.04.1UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1063.72.1USN-6766-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1063.72.1UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-gcp5.15.0-1059.67UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-gcp5.15.0-1059.67USN-6766-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1024.26~22.04.1USN-6895-2
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1024.26~22.04.1UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-gke5.15.0-1058.63USN-6766-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1058.63UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1044.51USN-6766-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1044.51UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-44.44~22.04.1USN-6900-1
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-44.44~22.04.1UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-ibm5.15.0-1054.57USN-6766-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1054.57UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1057.63USN-6795-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1057.63UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-kvm5.15.0-1058.63USN-6766-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1058.63UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-106.116USN-6766-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-106.116UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-44.44.1~22.04.1USN-6895-3
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-44.44.1~22.04.1UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1054.55UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1054.55USN-6766-1
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1023.24UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1023.24USN-6895-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1026.26UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1015.15UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1027.28USN-6895-4
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1027.28UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-oracle5.15.0-1059.65USN-6766-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1059.65UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1026.26~22.04.1USN-6895-3
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1026.26~22.04.1UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-raspi5.15.0-1054.57UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-raspi5.15.0-1054.57USN-6766-2
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1017.18~22.04.1USN-6895-3
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1017.18~22.04.1UBUNTU-CVE-2023-52631
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34UBUNTU-CVE-2023-52631

Affected products (as reported)

VendorProductVersions
Linux Linux be71b5cba2e6485e8959da7a9f9a44461a1bb074 – before ae4acad41b0f93f1c26cc0fc9135bb79d8282d0bbe71b5cba2e6485e8959da7a9f9a44461a1bb074 – before ec1bedd797588fe38fc11cba26d77bb1d9b194c6be71b5cba2e6485e8959da7a9f9a44461a1bb074 – before fb7bcd1722bc9bc55160378f5f99c01198fd14a7be71b5cba2e6485e8959da7a9f9a44461a1bb074 – before 686820fe141ea0220fc6fdfc7e5694f915cf64b2be71b5cba2e6485e8959da7a9f9a44461a1bb074 – before b2dd7b953c25ffd5912dda17e980e7168bebcf6c
Linux Linux 5.15

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References