CVE-2022-49553fs/ntfs3: validate BOOT sectors_per_clusters
- 7.8HighCVSS base score
- 0.28%Exploitation in 30 daysEPSS · top 79% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT sectors_per_clusters When the NTFS BOOT sectors_per_clusters field is > 0x80, it represents a shift value. Make sure that the shift value is not too large before using it (NTFS max cluster size is 2MB). Return -EVINVAL if it too large. This prevents negative shift values and shift values that are larger than the field size. Prevents this UBSAN error: UBSAN: shift-out-of-bounds in ../fs/ntfs3/super.c:673:16 shift exponent -192 is negative
Timeline
ID reserved
By Linux
Published
- 18 months later
· 18 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.28% · top 79% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 82cae269cfa953032fbb8980a7d554d60fb00b17 – < 58cf68a1886d14ffdc5c892ce483a82156769e88
- affected 82cae269cfa953032fbb8980a7d554d60fb00b17 – < 4746c49b11b2403f5b5b07c6eac9e60663dcd9a3
- affected 82cae269cfa953032fbb8980a7d554d60fb00b17 – < a2b6986316a2d106f6951e76db70fa4b2fde64a9
- affected 82cae269cfa953032fbb8980a7d554d60fb00b17 – < a3b774342fa752a5290c0de36375289dfcf4a260
- affected 5.15
- unaffected < 5.15
- unaffected 5.15.45 – ≤ 5.15.*
- unaffected 5.17.13 – ≤ 5.17.*
- unaffected 5.18.2 – ≤ 5.18.*
- unaffected 5.19 – ≤ *
References
References4
- https://git.kernel.org/stable/c/58cf68a1886d14ffdc5c892ce483a82156769e88 (opens in a new tab)
- https://git.kernel.org/stable/c/4746c49b11b2403f5b5b07c6eac9e60663dcd9a3 (opens in a new tab)
- https://git.kernel.org/stable/c/a2b6986316a2d106f6951e76db70fa4b2fde64a9 (opens in a new tab)
- https://git.kernel.org/stable/c/a3b774342fa752a5290c0de36375289dfcf4a260 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2022-54679 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2022-49553)Record last updated .