CVE-2022-50869
Linux Debian vulnerability analysis and mitigation

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix slab-out-of-bounds in r_page

When PAGE_SIZE is 64K, if read_log_page is called by log_read_rst for the first time, the size of *buffer would be equal to DefaultLogPageSize(4K).But for *buffer operations like memcpy, if the memory area size(n) which being assigned to buffer is larger than 4K (log->page_size(64K) or bytes(64K-page_off)), it will cause an out of boundary error. Call trace: [...] kasan_report+0x44/0x130 check_memory_region+0xf8/0x1a0 memcpy+0xc8/0x100 ntfs_read_run_nb+0x20c/0x460 read_log_page+0xd0/0x1f4 log_read_rst+0x110/0x75c log_replay+0x1e8/0x4aa0 ntfs_loadlog_and_replay+0x290/0x2d0 ntfs_fill_super+0x508/0xec0 get_tree_bdev+0x1fc/0x34c [...]

Fix this by setting variable r_page to NULL in log_read_rst.


SourceNVD

Related Linux Debian vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-23884HIGH7.7
  • Linux DebianLinux Debian
  • freerdp3
NoNoJan 19, 2026
CVE-2026-23883HIGH7.7
  • Linux DebianLinux Debian
  • freerdp3
NoNoJan 19, 2026
CVE-2026-23534HIGH7.7
  • Linux DebianLinux Debian
  • freerdp-devel
NoNoJan 19, 2026
CVE-2026-23533HIGH7.7
  • Linux DebianLinux Debian
  • freerdp3
NoNoJan 19, 2026
CVE-2026-23732MEDIUM5.5
  • Linux DebianLinux Debian
  • freerdp-libs
NoNoJan 19, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management