CVE-2022-48423: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur.

Affected products

• Linux Linux Kernel: from 5.15, before 5.15.87 (fixed in 5.15.87); from 5.16, before 6.0.17 (fixed in 6.0.17); from 6.1, before 6.1.3 (fixed in 6.1.3)

Published 2023-03-19. Last modified 2026-10-02.