CVE-2026-80869

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfsreadinodemount The $MFT attribute-list walk in ntfsreadinodemount validates each entry only with "u8 alentry + 6 alend" and "u8 alentry + le16tocpualentry-length alend", but then reads...

CVE-2026-80869

CVE-2026-80869 affects the Linux kernel NTFS filesystem driver. In ntfs_read_inode_mount() , the $MFT attribute-list walk validated only that 6 bytes of each entry were in range, then read lowest_vcn (offset 8, 8 bytes) and mft_reference (offset 16) — fields beyond the proven boundary. Since al_e...

CVE-2026-80869 ntfs: bound the attribute-list entry in ntfs_read_inode_mount()

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfsreadinodemount The $MFT attribute-list walk in ntfsreadinodemount validates each entry only with "u8 alentry + 6 alend" and "u8 alentry + le16tocpualentry-length alend", but then reads...