CVE-2022-48424: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur.

Affected products

• Linux Linux Kernel: from 5.15, before 5.15.87 (fixed in 5.15.87); from 5.16, before 6.0.17 (fixed in 6.0.17); from 6.1, before 6.1.3 (fixed in 6.1.3)

Published 2023-03-19. Last modified 2026-06-17.