← CVE Intelligence

CVE-2023-53732

fs/ntfs3: Fix NULL dereference in ni_write_inode PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in ni_write_inode Syzbot reports a NULL dereference in ni_write_inode. When creating a new inode, if allocation fails in mi_init function (called in mi_format_new function), mi->mrec is set to NULL. In the error path of this inode creation, mi->mrec is later dereferenced in ni_write_inode. Add a NULL check to prevent NULL dereference.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e before d4b74482529516477cf7b12502538e51827c699f; affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e before b3152afc0eb864f7c6ecad134a15b577ef7aec77; affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e before b1135fbaf8ebef93df326761ac70ebcc3c2e3d63; affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e before 8dae4f6341e335a09575be60b4fdf697c732a470
Linux / Linuxaffected 5.15; unaffected 0 before 5.15; unaffected 5.15.113 through 5.15.*; unaffected 6.1.81 through 6.1.*; unaffected 6.3.4 through 6.3.*; unaffected 6.4 through *

CWE

No CWE identifiers supplied.

References