| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025041614-CVE-2025-22081-47ac@gregkh> Date: Wed, 16 Apr 2025 16:12:52 +0200 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Subject: CVE-2025-22081: fs/ntfs3: Fix a couple integer overflows on 32bit systems Description =========== In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the "off + sizeof(struct NTFS_DE)" addition can have an integer wrapping issue. Fix it by using size_add(). The Linux kernel CVE team has assigned CVE-2025-22081 to this issue. Affected and fixed versions =========================== Issue introduced in 5.15 with commit 82cae269cfa953032fbb8980a7d554d60fb00b17 and fixed in 5.15.180 with commit 0922d86a7a6032cb1694eab0b44b861bd33ba8d5 Issue introduced in 5.15 with commit 82cae269cfa953032fbb8980a7d554d60fb00b17 and fixed in 6.1.134 with commit 1a14e9718a19d2e88de004a1360bfd7a86ed1395 Issue introduced in 5.15 with commit 82cae269cfa953032fbb8980a7d554d60fb00b17 and fixed in 6.6.87 with commit 0dfe700fbd3525f30a36ffbe390a5b9319bd009a Issue introduced in 5.15 with commit 82cae269cfa953032fbb8980a7d554d60fb00b17 and fixed in 6.12.23 with commit 284c9549386e9883855fb82b730303bb2edea9de Issue introduced in 5.15 with commit 82cae269cfa953032fbb8980a7d554d60fb00b17 and fixed in 6.13.11 with commit 0538f52410b619737e663167b6a2b2d0bc1a589d Issue introduced in 5.15 with commit 82cae269cfa953032fbb8980a7d554d60fb00b17 and fixed in 6.14.2 with commit 4d0f4f42922a832388a0c2fe5204c0a1037ff786 Issue introduced in 5.15 with commit 82cae269cfa953032fbb8980a7d554d60fb00b17 and fixed in 6.15-rc1 with commit 5ad414f4df2294b28836b5b7b69787659d6aa708 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2025-22081 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: fs/ntfs3/index.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/0922d86a7a6032cb1694eab0b44b861bd33ba8d5 https://git.kernel.org/stable/c/1a14e9718a19d2e88de004a1360bfd7a86ed1395 https://git.kernel.org/stable/c/0dfe700fbd3525f30a36ffbe390a5b9319bd009a https://git.kernel.org/stable/c/284c9549386e9883855fb82b730303bb2edea9de https://git.kernel.org/stable/c/0538f52410b619737e663167b6a2b2d0bc1a589d https://git.kernel.org/stable/c/4d0f4f42922a832388a0c2fe5204c0a1037ff786 https://git.kernel.org/stable/c/5ad414f4df2294b28836b5b7b69787659d6aa708
Powered by blists - more mailing lists