CVE-2022-48502: High severity linux kernel vulnerability
An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfssetea in fs/ntfs3/xattr.c.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48502?
CVE-2022-48502 is classified as a high severity vulnerability due to the potential for out-of-bounds reads.
How do I fix CVE-2022-48502?
To fix CVE-2022-48502, upgrade to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which systems are affected by CVE-2022-48502?
CVE-2022-48502 affects the Linux kernel versions prior to 6.2 and certain NetApp hardware like the H300s, H410c, H410s, H500s, and H700s.
What is the impact of CVE-2022-48502?
CVE-2022-48502 allows for out-of-bounds reads which could lead to information disclosure or crashes.
When was CVE-2022-48502 discovered?
CVE-2022-48502 was discovered prior to the release of Linux kernel version 6.2.