CVE-2024-52560 fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses CVEs in NTFS3 File System Vulnerabilities Microsoft has published information on two vulnerabilities in the NTFS3 file system. CVE-2024-27407, published on May 17, 2024, involves a fixed overflow check in the function mi_enum_attr(). CVE-2024-52560, published on February 27, 2025, marks an inode as bad when an error is detected in the same function. 2 sources 41