Not yet scoredPublished Oct 22, 2025

CVE-2023-53732fs/ntfs3: Fix NULL dereference in ni_write_inode

Updated under an hour ago (Oct 26, 2026, 10:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in ni_write_inode Syzbot reports a NULL dereference in ni_write_inode. When creating a new inode, if allocation fails in mi_init function (called in mi_format_new function), mi->mrec is set to NULL. In the error path of this inode creation, mi->mrec is later dereferenced in ni_write_inode. Add a NULL check to prevent NULL dereference.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e before d4b74482529516477cf7b12502538e51827c699f; from 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e before b3152afc0eb864f7c6ecad134a15b577ef7aec77; from 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e before b1135fbaf8ebef93df326761ac70ebcc3c2e3d63; 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e builds before 8dae4f6341e335a09575be60b4fdf697c732a470	CNA record

References

References

https://git.kernel.org/stable/c/d4b74482529516477cf7b12502538e51827c699f
https://git.kernel.org/stable/c/b3152afc0eb864f7c6ecad134a15b577ef7aec77
https://git.kernel.org/stable/c/b1135fbaf8ebef93df326761ac70ebcc3c2e3d63
https://git.kernel.org/stable/c/8dae4f6341e335a09575be60b4fdf697c732a470

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.