CVE-2024-38624: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
Published Jun 21, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
For example, in the expression: vbo = 2 vbo + skip
Affected Software
5 affected componentsFixes available
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Linux Linux kernel>=5.15<5.15.161
Linux Linux kernel>=5.16<6.1.93
Linux Linux kernel>=6.2<6.6.33
Linux Linux kernel>=6.7<6.9.4
Remediation
Event History
Jun 21, 2024
CVE Published
via MITRE·10:18 AM
Data Sourced
via MITRE·10:18 AM
Description
Data Sourced
via NVD·11:15 AM
Description
Data Sourced
via NVD·11:15 AM
RemedySeverityWeaknessAffected Software
Sep 11, 2024
Data Sourced
via Launchpad·04:24 PM
Description
May 9, 2025
Data Sourced
via Ubuntu·05:14 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-38624?
CVE-2024-38624 has a medium severity rating due to the potential for a 32-bit overflow in the Linux kernel.
2
How do I fix CVE-2024-38624?
To fix CVE-2024-38624, upgrade to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
3
Which systems are affected by CVE-2024-38624?
CVE-2024-38624 affects certain versions of the Linux kernel running on Debian-based systems.
4
What type of vulnerability is CVE-2024-38624?
CVE-2024-38624 is a coding vulnerability that involves a potential 32-bit overflow in the NTFS3 file system of the Linux kernel.
5
Is there a known exploit for CVE-2024-38624?
As of now, there are no known public exploits specifically targeting CVE-2024-38624.