Description
A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Kernel | Linux kernel 6.2-rc1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.1.8-1 | — |
| Debian 13 | linux | 6.1.8-1 | — |
| Debian 12 | linux | 6.1.8-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1015.17 | — |
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-70.77 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-allwinner-5.19 | 5.19.0-1012.12~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1034.38 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1036.43 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-azure-5.19 | 5.19.0-1026.29~22.04.1 | USN-6079-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1036.43.1 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1032.40 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-gcp-5.19 | 5.19.0-1024.26~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gke +1 | 5.15.0-1031.36 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1018.23 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-hwe-5.19 | 5.19.0-42.43~22.04.1 | USN-6096-1 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1028.31 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1028.33 | USN-6057-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-5.19 | 5.19.0-1024.25~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1023.23 | — |
| Ubuntu 22.04 LTS | linux-oem-5.17 | 5.17.0-1034.35 | USN-6206-1 |
| Ubuntu 22.04 LTS | linux-oem-6.0 | 6.0.0-1019.19 | USN-6235-1 |
| Ubuntu 22.04 LTS | linux-oem-6.1 | 6.1.0-1008.8 | USN-5978-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1033.39 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1027.29 | USN-6025-1 |
| Ubuntu 22.04 LTS | linux-riscv +1 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1034.38~20.04.1 | USN-6025-1 |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1036.43~20.04.1 | USN-6025-1 |
| Ubuntu 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1036.43~20.04.1.1 | — |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1032.40~20.04.1 | USN-6025-1 |
| Ubuntu 20.04 LTS | linux-gke-5.15 | 5.15.0-1031.36~20.04.1 | USN-6025-1 |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | 5.15.0-1018.23~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-70.77~20.04.1 | USN-6040-1, USN-6025-1 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1030.35~20.04.1 | USN-6134-1 |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1033.39~20.04.1 | USN-6025-1 |
| Ubuntu 20.04 LTS | linux-riscv +22 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1031.35~20.04.1 | — |
| Ubuntu 18.04 LTS | linux-gcp +13 | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1024.29 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1036.39 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.1.10-15.42 | 1.0-0.amzn2023 | ALAS2023-2023-070 |
| Amazon Linux 2023 | perf +12 | 6.1.10-15.42.amzn2023 | ALAS2023-2023-070 |
Advisories 11
- USN-6134-1 linux-intel-iotg-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6079-1 linux, linux-aws, linux-azure, linux-azure-5.19, linux-kvm, linux-lowlatency, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6096-1 linux-gcp, linux-hwe-5.19 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6235-1 linux-oem-6.0 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-5978-1 linux-oem-6.1 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6025-1 linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6040-1 linux-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6057-1 linux-intel-iotg vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6206-1 linux-oem-5.17 vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- ALAS2023-2023-070 Important: kernel security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Apr 10, 2024
- WID-SEC-2022-2415 Linux Kernel: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jul 18, 2023