CVE-2024-50244

Summary

CVE-2024-50244 is a recently identified vulnerability affecting the Linux kernel. Specifically, it pertains to the NTFS (New Technology File System) driver within the fs/ntfs3 module. This issue involves a lack of sufficient checks during the ni_clear() function, which can result in uninitialized bitmap data being accessed during the replay process. To mitigate this risk, developers have added a new check for NTFS_FLAGS_LOG_REPLAYING to prevent access to such data. This vulnerability could potentially allow an attacker to manipulate file system data during log replay, leading to serious security consequences. System administrators and users are advised to update their Linux distributions to the latest kernel version to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.