CVE-2023-26607: In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c

High severity · published Feb 26, 2023

CVE-2023-26607

In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c

7.1

CVSS

0.6%

EPSS

On KEV

Description

In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.6% · higher than 49% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

2.6.12 before 4.9.334; 4.10 before 4.14.300; 4.15 before 4.19.267; 4.20 before 5.4.225; 5.5.0 before 5.10.156; 5.11 before 5.15.80; +1 more · source: NVD

Hci Baseboard Management Controller · Netapp

h300s; h410c; h410s; h500s; h700s · source: NVD

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens

before V1.1 · source: CISA

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-26607

CVE.org

https://www.cve.org/CVERecord?id=CVE-2023-26607

bugzilla.suse.com

https://bugzilla.suse.com/show_bug.cgi?id=1208703

git.kernel.org

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36a4d82dddbbd421d2b8e79e1cab68c8126d5075

Exploit

https://lkml.org/lkml/2023/2/21/1353

Third Party Advisory

https://security.netapp.com/advisory/ntap-20230316-0010/

cert-portal.siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-794697.html