CVE-2022-50262 is a Linux kernel vulnerability affecting the NTFS3 filesystem driver. It arises from insufficient validation of the BOOT record_size field, which, when negative, can lead to a kernel NULL pointer dereference (NPD) during the mounting of a maliciously crafted NTFS image. Rated as Medium severity with a CVSS score of 5.5, this vulnerability requires local access (AV:L, PR:L) and has low attack complexity (AC:L). Successful exploitation could result in a denial of service (A:H) due to the kernel crash, but does not impact confidentiality or integrity (C:N, I:N). Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.15, < 5.15.87CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.16, < 6.0.17CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.1, < 6.1.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.