CVE-2024-50246

high

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr alloc_size check

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05

https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

https://git.kernel.org/stable/c/effac690913af9a6c3d6cd967281a34e47ed3e4c

https://git.kernel.org/stable/c/e91fbb21f248bdd8140f343dac32b77b9bc10fec

https://git.kernel.org/stable/c/c4a8ba334262e9a5c158d618a4820e1b9c12495c

https://git.kernel.org/stable/c/2fcae4c2014a40c8ae0fc3d8cca3ba9e168308de

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-45163

https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Details

Source: Mitre, NVD

Published: 2024-11-09

Updated: 2026-08-04

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00036