CVE-2022-49166 - CVE | ByteOS Network

CVE Vulnerability Details :

CVE-2022-49166

PUBLISHED

More Info Official Page

Assigner-Linux

Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published At-26 Feb, 2025 | 01:55

Updated At-23 Dec, 2025 | 13:22

▼CVE Numbering Authority (CNA)

ntfs: add sanity check on allocation size

In the Linux kernel, the following vulnerability has been resolved: ntfs: add sanity check on allocation size ntfs_read_inode_mount invokes ntfs_malloc_nofs with zero allocation size. It triggers one BUG in the __ntfs_malloc function. Fix this by adding sanity check on ni->attr_list_size.

Affected Products

Vendor

Linux Kernel Organization, Inc

Product

Repo

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Program Files

fs/ntfs/inode.c

Default Status

unaffected

Versions

Affected

From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bd8d7daa0e53b184a2f3c6e0d47330780d0a0650 (git)
From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 21d490232f323ed4053eb9924615e6fea291f154 (git)
From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 07793d2e55563124108762f4e5f811db92ffe02f (git)
From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fe41ad8be036a3de3e4bdde709551aeb4de2fe7d (git)
From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b230f2d9441a34c7f483d39ab78519bcf73cc2e0 (git)
From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 24ab2d4ef52c2dbb62a60844b87fc8872383407a (git)
From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 115fae2c1566eacc5ad2055f72521354612e72c3 (git)
From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c641087d381a08363e5f14179bc6b0a23eca7c47 (git)
From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 714fbf2647b1a33d914edd695d4da92029c7e7c0 (git)

Vendor

Linux Kernel Organization, Inc

Product

Repo

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Program Files

fs/ntfs/inode.c

Default Status

affected

Versions

Affected

2.6.12

Unaffected

From 0 before 2.6.12 (semver)
From 4.9.311 through 4.9.* (semver)
From 4.14.276 through 4.14.* (semver)
From 4.19.238 through 4.19.* (semver)
From 5.4.189 through 5.4.* (semver)
From 5.10.110 through 5.10.* (semver)
From 5.15.33 through 5.15.* (semver)
From 5.16.19 through 5.16.* (semver)
From 5.17.2 through 5.17.* (semver)
From 5.18 through * (original_commit_for_fix)

References

Hyperlink	Resource
https://git.kernel.org/stable/c/bd8d7daa0e53b184a2f3c6e0d47330780d0a0650	N/A
https://git.kernel.org/stable/c/21d490232f323ed4053eb9924615e6fea291f154	N/A
https://git.kernel.org/stable/c/07793d2e55563124108762f4e5f811db92ffe02f	N/A
https://git.kernel.org/stable/c/fe41ad8be036a3de3e4bdde709551aeb4de2fe7d	N/A
https://git.kernel.org/stable/c/b230f2d9441a34c7f483d39ab78519bcf73cc2e0	N/A
https://git.kernel.org/stable/c/24ab2d4ef52c2dbb62a60844b87fc8872383407a	N/A
https://git.kernel.org/stable/c/115fae2c1566eacc5ad2055f72521354612e72c3	N/A
https://git.kernel.org/stable/c/c641087d381a08363e5f14179bc6b0a23eca7c47	N/A
https://git.kernel.org/stable/c/714fbf2647b1a33d914edd695d4da92029c7e7c0	N/A

Hyperlink: https://git.kernel.org/stable/c/bd8d7daa0e53b184a2f3c6e0d47330780d0a0650

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/21d490232f323ed4053eb9924615e6fea291f154

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/07793d2e55563124108762f4e5f811db92ffe02f

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/fe41ad8be036a3de3e4bdde709551aeb4de2fe7d

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/b230f2d9441a34c7f483d39ab78519bcf73cc2e0

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/24ab2d4ef52c2dbb62a60844b87fc8872383407a

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/115fae2c1566eacc5ad2055f72521354612e72c3

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/c641087d381a08363e5f14179bc6b0a23eca7c47

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/714fbf2647b1a33d914edd695d4da92029c7e7c0

Resource: N/A