CVE-2022-48425

CVSS V2 None CVSS V3 None
Description
In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.
Overview
  • CVE ID
  • CVE-2022-48425
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2023-03-19T03:15:11
  • Last Modified Date
  • 2023-04-13T17:15:07
Weakness Enumerations
CWE URL
CWE-763 http://cwe.mitre.org/data/definitions/763.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 6.2.7
References
Reference URL Reference Tags
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=467333af2f7b95eeaa61a5b5369a80063cd971fd Patch
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/fs/ntfs3?id=467333af2f7b95eeaa61a5b5369a80063cd971fd Patch
https://security.netapp.com/advisory/ntap-20230413-0006/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-48425
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48425
History
Created Old Value New Value Data Type Notes
2023-04-17 02:57:18 Added to TrackCVE
2023-04-17 02:57:21 Weakness Enumeration new