Linux Kernel NTFS Attribute Record Iteration Integer Overflow Vulnerability

A vulnerability in the Linux kernel's NTFS file system handling has been identified, specifically during the iteration over attribute records in the Master File Table (MFT). The issue arises in the function 'ntfs_attr_find()', where the kernel calculates the end address of the current attribute record based on its length. This calculation can lead to an integer overflow, causing the iteration to become infinite on 32-bit systems. The vulnerability has been addressed by implementing additional checks to prevent the overflow during the iteration process.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the system to enter an infinite loop during the attribute record iteration.