CVE-2022-50442

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Validate buffer length while parsing index

indx_read is called when we have some NTFS directory operations that

need more information from the index buffers. This adds a sanity check

to make sure the returned index buffer length is legit, or we may have

some out-of-bound memory accesses.

[ 560.897595] BUG: KASAN: slab-out-of-bounds in hdr_find_e.isra.0+0x10c/0x320

[ 560.898321] Read of size 2 at addr ffff888009497238 by task exp/245

[ 560.898760]

[ 560.899129] CPU: 0 PID: 245 Comm: exp Not tainted 6.0.0-rc6 #37

[ 560.899505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014

[ 560.900170] Call Trace:

[ 560.900407] <TASK>

[ 560.900732] dump_stack_lvl+0x49/0x63

[ 560.901108] print_report.cold+0xf5/0x689

[ 560.901395] ? hdr_find_e.isra.0+0x10c/0x320

[ 560.901716] kasan_report+0xa7/0x130

[ 560.901950] ? hdr_find_e.isra.0+0x10c/0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References