PT-2025-53987 · Linux+2 · Linux Kernel+2

Published 2022-01-01 · Updated 2025-12-30 · CVE-2022-50869

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's ntfs3 file system implementation. Specifically, an out-of-bounds write can occur in the r page function when the PAGE SIZE is 64K and read log page is called by log read rst for the first time. This happens because the size of the buffer is set to 4K, but subsequent memory operations, such as memcpy, attempt to write up to 64K, leading to a buffer overflow. The call trace includes functions like ntfs read run nb, read log page, log read rst, log replay, and ntfs loadlog and replay.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50869

Affected Products

Debian

Linux Kernel

Ntfs3

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50869.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50869 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50869 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50869 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50869 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50869 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50869 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50869 · Vendor Advisory
• https://git.kernel.org/stable/c/6d076293e5bffdf897ea5f975669206e09beed6a · Note
• https://git.kernel.org/stable/c/bf86a640a34947d92062996e1a75b9cd9d83dd19 · Note
• https://git.kernel.org/stable/c/ecfbd57cf9c5ca225184ae266ce44ae473792132 · Note
• https://git.kernel.org/stable/c/ed686e7a26dd19ae6b46bb662f735acfa88ff7bc · Note
• https://twitter.com/CVEnew/status/2006006728391864785 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/ecfbd57cf9c5ca225184ae266ce44ae473792132 · Note