← All advisories

High severity7.8NVD Advisory· Published Mar 19, 2023· Updated Jun 17, 2026

CVE-2022-48425

CVE-2022-48425

Description

In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Linux/Kernel3 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.15,<5.15.113
- (no CPE)
- (no CPE)range: <=6.2.7

Patches

Vulnerability mechanics

References

3

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdPatch
git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/fs/ntfs3nvdPatch
security.netapp.com/advisory/ntap-20230413-0006/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.