Threats tagged 'ghsa-88pg-r8xc-mrw7'

A vulnerability in the Linux kernel's NTFS3 filesystem driver allows a malformed NTFS directory index entry to specify a key size larger than the actual data present. This causes out-of-bounds reads during directory lookups, potentially leading to kernel memory corruption and system instability. The issue arises because the index-header validators did not fully verify the layout and size constraints of each directory entry. The vulnerability has been resolved by enhancing validation to reject malformed entries before they are processed.