What is CVE-2024-50246?

CVE-2024-50246 is a high-severity software vulnerability with a CVSS score of 7.8. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr alloc_size check

Is CVE-2024-50246 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

What products does CVE-2024-50246 affect?

Tracked products affected include Linux Kernel. Check the version you run to see whether it is affected.

How do I fix CVE-2024-50246?

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

← All products

CVE-2024-50246

HIGH severity · CVSS 7.8

7.8CVSS HIGH

Summary

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr alloc_size check

Impact & exploitability

Attack vectorLocal

Attack complexityLow

Privileges requiredNone

User interactionRequired

Confidentiality impactHigh

Integrity impactHigh

Availability impactHigh

Exploit probability (EPSS)0%

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products we track (1)

Linux Kernel

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: https://git.kernel.org/stable/c/2fcae4c2014a40c8ae0fc3d8cca3ba9e168308de ↗

Additional information

NVD record
https://git.kernel.org/stable/c/2fcae4c2014a40c8ae0fc3d8cca3ba9e168308dePatch
https://git.kernel.org/stable/c/c4a8ba334262e9a5c158d618a4820e1b9c12495cPatch
https://git.kernel.org/stable/c/e91fbb21f248bdd8140f343dac32b77b9bc10fecPatch
https://git.kernel.org/stable/c/effac690913af9a6c3d6cd967281a34e47ed3e4c
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
https://cert-portal.siemens.com/productcert/html/ssa-082556.html