CVE-2023-54272
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
30/12/2025
Última modificación:
30/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
fs/ntfs3: Fix a possible null-pointer dereference in ni_clear()<br />
<br />
In a previous commit c1006bd13146, ni->mi.mrec in ni_write_inode()<br />
could be NULL, and thus a NULL check is added for this variable.<br />
<br />
However, in the same call stack, ni->mi.mrec can be also dereferenced<br />
in ni_clear():<br />
<br />
ntfs_evict_inode(inode)<br />
ni_write_inode(inode, ...)<br />
ni = ntfs_i(inode);<br />
is_rec_inuse(ni->mi.mrec) -> Add a NULL check by previous commit<br />
ni_clear(ntfs_i(inode))<br />
is_rec_inuse(ni->mi.mrec) -> No check<br />
<br />
Thus, a possible null-pointer dereference may exist in ni_clear().<br />
To fix it, a NULL check is added in this function.