Linux Kernel Vulnerability in NTFS3 Attribute List Generation

CVE-2023-53328

What is CVE-2023-53328?

A vulnerability with the Linux kernel's NTFS3 module involves improper handling of errors while generating attribute lists. The function ni_create_attr_list, which previously utilized WARN_ON for logging issues, has been updated to enhance its error handling flow. This update aims to prevent potential crashes or undefined behavior linked to NULL pointer dereferences and to improve the overall robustness of the file system's operations, specifically during the handling of user-defined attributes.

References