CVE-2022-48502

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2Release Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0e8235d28f3a0e9eda9f02ff67ee566d5f42b66bMailing List, Patch
https://security.netapp.com/advisory/ntap-20230703-0004/Third Party Advisory, VDB Entry
https://syzkaller.appspot.com/bug?extid=8778f030156c6cd16d72Exploit, Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2Release Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0e8235d28f3a0e9eda9f02ff67ee566d5f42b66bMailing List, Patch
https://security.netapp.com/advisory/ntap-20230703-0004/Third Party Advisory, VDB Entry
https://syzkaller.appspot.com/bug?extid=8778f030156c6cd16d72Exploit, Third Party Advisory

Timeline

Published: May 31, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-485038.8The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey CVE-2022-485045.5The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensiti CVE-2022-485055.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected part CVE-2022-485062.4A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners a CVE-2022-485077.5Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect servic CVE-2022-485087.5Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity.CVE-2022-485095.9Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vul CVE-2022-48515.3Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-485109.8Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations.CVE-2022-485119.8Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability ma CVE-2022-485129.8Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decodin CVE-2022-485139.8Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-