CVE-2024-38625: fs/ntfs3: Check 'folio' pointer for NULL
Published Jun 21, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Check 'folio' pointer for NULL
It can be NULL if bmap is called.
Affected Software
3 affected componentsFixes available
Linux Linux kernel>=5.15<6.6.33
Linux Linux kernel>=6.7<6.9.4
debian/linux<=6.1.129-1, <=6.1.135-1
5.10.223-15.10.234-16.12.25-16.12.27-1
Remediation
Event History
Jun 21, 2024
CVE Published
via MITRE·10:18 AM
Data Sourced
via MITRE·10:18 AM
Description
Sep 11, 2024
Data Sourced
via Launchpad·04:24 PM
Description
May 5, 2025
Data Sourced
via Ubuntu·05:21 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-38625?
CVE-2024-38625 is classified as a medium severity vulnerability in the Linux kernel.
2
How do I fix CVE-2024-38625?
To fix CVE-2024-38625, update the Linux kernel to one of the patched versions: 5.10.223-1, 5.10.226-1, 6.12.12-1 or 6.12.13-1.
3
What component of the Linux kernel is affected by CVE-2024-38625?
CVE-2024-38625 affects the fs/ntfs3 component within the Linux kernel.
4
Which Linux kernel versions are vulnerable to CVE-2024-38625?
Linux kernel versions between 5.15 and 6.6.33, as well as from 6.7 to 6.9.4, are vulnerable to CVE-2024-38625.
5
What is the nature of the vulnerability in CVE-2024-38625?
CVE-2024-38625 involves a NULL pointer dereference in the fs/ntfs3 when accessing the 'folio' pointer during bmap calls.