CVE-2022-48502: Linux Kernel

High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

Affected products

• Linux Linux Kernel: from 5.15, before 5.15.121 (fixed in 5.15.121); from 5.16, before 6.1.40 (fixed in 6.1.40)
• Netapp h300s: affected versions not specified
• Netapp h410c: affected versions not specified
• Netapp h410s: affected versions not specified
• Netapp h500s: affected versions not specified
• Netapp h700s: affected versions not specified

Published 2023-05-31. Last modified 2026-06-17.