CVE-2022-50737

CVE-2022-50737 relates to the Linux kernel ntfs3 subsystem. The connected materials describe a fix for validating the NTFS security index roots during NTFS security initialization, addressing a use-after-free scenario illustrated by a KASAN report when mounting NTFS. The resolution enforces that ...