CVE-2023-52640: fs/ntfs3: Fix oob in ntfs_listxattr
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix oob in ntfslistxattr
The length of name cannot exceed the space occupied by ea.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52640?
CVE-2023-52640 has been classified as a high severity vulnerability due to its impact on the Linux kernel's NTFS file system.
How do I fix CVE-2023-52640?
To fix CVE-2023-52640, upgrade to the latest patched versions of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
What impact does CVE-2023-52640 have on my system?
CVE-2023-52640 could potentially lead to out-of-bounds reads and data leakage in systems using the NTFS file system.
Which systems are affected by CVE-2023-52640?
CVE-2023-52640 affects Linux systems that utilize the ntfs3 subsystem within the kernel.
What is the nature of the flaw in CVE-2023-52640?
The flaw in CVE-2023-52640 pertains to an out-of-bounds condition in the ntfs_listxattr function of the Linux kernel's NTFS implementation.