CVE-2024-50248— ntfs3: Add bounds checking to mi_enum_attr()
Possible ATT&CK Techniques 1AI
T1211 · Exploitation for StealthAffected Version Matrix 10
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e< 386613a44b858304a88529ade2ccc1e079a5fc56 | affected |
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e< 22cdf3be7d34f61a91b9e2966fec3a29f3871398 | affected | ||
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e< 809f9b419c75f8042c58434d2bfe849140643e9d | affected | ||
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e< 556bdf27c2dd5c74a9caacbe524b943a6cd42d99 | affected | ||
5.15 | affected | ||
< 5.15 | unaffected | ||
6.1.120≤ 6.1.* | unaffected | ||
6.6.60≤ 6.6.* | unaffected | ||
| … +2 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-50248
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ntfs3: Add bounds checking to mi_enum_attr()
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Add bounds checking to mi_enum_attr() Added bounds checking to make sure that every attr don't stray beyond valid memory region.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mi_enum_attr函数中的界限检查存在问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-50248
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-50248
请登录查看更多情报信息。
Patches & Fixes for CVE-2024-50248 (2)
Same Patch Batch · Linux · 2024-11-09 · 49 CVEs total
| CVE-2024-50249 | ACPI: CPPC: Make rmw_lock a raw_spin_lock | |
| CVE-2024-50252 | mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address | |
| CVE-2024-50254 | bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() | |
| CVE-2024-50258 | net: fix crash when config small gso_max_size/gso_ipv4_max_size | |
| CVE-2024-50259 | netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write | |
| CVE-2024-50260 | sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() | |
| CVE-2024-50261 | macsec: Fix use-after-free while sending the offloading packet | |
| CVE-2024-50262 | bpf: Fix out-of-bounds write in trie_get_next_key() | |
| CVE-2024-50257 | netfilter: Fix use-after-free in get_info() | |
| CVE-2024-50250 | fsdax: dax_unshare_iter needs to copy entire blocks | |
| CVE-2024-50251 | netfilter: nft_payload: sanitize offset and length before calling skb_checksum() | |
| CVE-2024-50247 | fs/ntfs3: Check if more than chunk-size bytes are written | |
| CVE-2024-50246 | fs/ntfs3: Add rough attr alloc_size check | |
| CVE-2024-50244 | fs/ntfs3: Additional check in ni_clear() | |
| CVE-2024-50245 | fs/ntfs3: Fix possible deadlock in mi_read | |
| CVE-2024-50243 | fs/ntfs3: Fix general protection fault in run_is_mapped_full | |
| CVE-2024-50242 | fs/ntfs3: Additional check in ntfs_file_release | |
| CVE-2024-50241 | NFSD: Initialize struct nfsd4_copy earlier | |
| CVE-2024-50240 | phy: qcom: qmp-usb: fix NULL-deref on runtime suspend | |
| CVE-2024-50239 | phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend |
Showing top 20 of 49 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-53365
vsock/virtio: fix zerocopy completion for multi-skb sends - CVE-2026-53364
Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate - CVE-2026-53363
xfrm: iptfs: preserve shared-frag marker in iptfs_consume_fr - CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc().
Same vendor: Linux
- CVE-2026-53365
vsock/virtio: fix zerocopy completion for multi-skb sends - CVE-2026-53364
Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate - CVE-2026-53363
xfrm: iptfs: preserve shared-frag marker in iptfs_consume_fr - CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc().
V. Comments for CVE-2024-50248
No comments yet