CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's NTFS3 file system, specifically within the `decompress_lznt()` function, which lacks proper validation of array index bounds when accessing the decompression table. This oversight can lead to an out-of-bounds read when processing a corrupted NTFS3 image, potentially exposing sensitive data or causing system instability. Organizations using Linux systems that handle NTFS3 file systems should prioritize applying the patch to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read. Add index bounds checking to prevent the OOB access.