Null Pointer Dereference in Linux Kernel's NTFS Handling

CVE-2022-50336

What is CVE-2022-50336?

A vulnerability exists in the Linux kernel's handling of NTFS metadata files, where a null pointer check was required for certain edge cases. This flaw can lead to a null pointer dereference (NPD) when reading metadata from malformed NTFS images. The addition of a null pointer check for the attr_load_runs_vcn function enhances the kernel's robustness against potential exploitation, mitigating risk associated with the improper handling of these file system structures.

References