https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:54:05 +0000 https://vulnerability.circl.lu/vuln/cve-2023-52631 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fs/ntfs3: Fix an NULL dereference bug</p> <p>The issue here is when this is called from ntfs_load_attr_list(). The &#34;size&#34; comes from le32_to_cpu(attr-&gt;res.data_size) so it can&#39;t overflow on a 64bit systems but on 32bit systems the &#34;+ 1023&#34; can overflow and the result is zero. This means that the kmalloc will succeed by returning the ZERO_SIZE_PTR and then the memcpy() will crash with an Oops on the next line.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>fs/ntfs3: Fix an NULL dereference bug</p> <p>The issue here is when this is called from ntfs_load_attr_list(). The &#34;size&#34; comes from le32_to_cpu(attr-&gt;res.data_size) so it can&#39;t overflow on a 64bit systems but on 32bit systems the &#34;+ 1023&#34; can overflow and the result is zero. This means that the kmalloc will succeed by returning the ZERO_SIZE_PTR and then the memcpy() will crash with an Oops on the next line.</p> https://vulnerability.circl.lu/vuln/cve-2023-52631