CVE-2023-52641: fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Add NULL ptr dereference checking at the end of attrallocateframe()
It is preferable to exit through the out: label because internal debugging functions are located there.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52641?
CVE-2023-52641 has a severity rating that reflects potential risks associated with a NULL pointer dereference in the Linux kernel.
How do I fix CVE-2023-52641?
To fix CVE-2023-52641, update your Linux kernel to at least version 5.10.223-1, 6.1.119-1, or any later patched versions.
Which Linux kernel versions are affected by CVE-2023-52641?
CVE-2023-52641 affects Linux Kernel versions between 5.15 and 6.8-rc3.
Is CVE-2023-52641 a local or remote vulnerability?
CVE-2023-52641 is primarily a local privilege escalation vulnerability in the Linux kernel.
What potential impact does CVE-2023-52641 have?
CVE-2023-52641 could potentially allow an attacker to crash the system or escalate privileges due to the NULL pointer dereference.