Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's NTFS file system handling has been addressed. The issue arose because the 'ntfs_read_inode_mount' function called 'ntfs_malloc_nofs' with a zero allocation size, which triggered a bug in the memory management function '__ntfs_malloc'. This vulnerability has been fixed by adding a sanity check on the attribute list size to prevent zero allocations.
Exploitation of this vulnerability caused a bug in the memory management of the NTFS file system, which could lead to improper handling of memory allocations.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.