Linux Kernel Integer Overflow Vulnerability in NTFS3 Filesystem Handling

An integer overflow vulnerability has been addressed in the Linux kernel's NTFS3 filesystem module. The issue arose in the 'hdr_first_de()' function, where the 'de_off' and 'used' variables, sourced from the disk, were not properly validated. On 32-bit systems, if both variables exceeded UINT_MAX - 16, the lack of appropriate checks led to an integer overflow, potentially causing unexpected behavior or exploitation.

Impact

Exploitation of this vulnerability could lead to incorrect memory handling, allowing for potential memory corruption or other unintended consequences.