CVE-2025-22081: fs/ntfs3: Fix a couple integer overflows on 32bit systems
fs/ntfs3: Fix a couple integer overflows on 32bit systems
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Configuration
Use size_add() for the off + sizeof(struct NTFS_DE) calculation to prevent integer overflows on 32-bit systems.
Linux kernel fs/ntfs3 off + sizeof(struct NTFS_DE) calculation = size_add()
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22081?
CVE-2025-22081 has not been publicly assigned a severity rating, but it addresses integer overflow vulnerabilities that could potentially lead to system instability.
How do I fix CVE-2025-22081?
To fix CVE-2025-22081, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2025-22081?
CVE-2025-22081 affects 32-bit systems running the Linux kernel that utilize NTFS file systems.
What is the impact of CVE-2025-22081?
The impact of CVE-2025-22081 involves potential integer overflow issues that can lead to unexpected behavior in the file handling of NTFS.
Is there any workaround for CVE-2025-22081?
There are no known workarounds for CVE-2025-22081 other than applying the patch provided in the updated kernel.