Stack-based Out-of-Bounds Write in Linux Kernel 4.15.0 Affects NTFS Filesystem Driver

CVE-2018-12931

What is CVE-2018-12931?

The ntfs_attr_find function in the ntfs.ko filesystem driver within Linux kernel 4.15.0 is susceptible to a stack-based out-of-bounds write vulnerability. Attackers can exploit this flaw by crafting malicious NTFS filesystems, potentially leading to a denial of service through kernel oops or panic. The impacts may extend beyond mere service disruptions, affecting system stability and security.

References