fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}

...

CVE-2026-64532

creationtimestamp| type| source ---|---|--- 2026-08-06 05:15:55+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-64532

A flaw was found in the Linux kernel ntfs3 driver. UpdateRecordDataRoot and UpdateRecordDataAllocation take view.dataoff from an on-disk directory entry and use it as a memmove destination without checking it against the entry size. Mounting a crafted NTFS image can write past the end of that ent...

CVE-2026-64532

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFSDE view.dataoff in UpdateRecordDataRoot,Allocation In doaction's UpdateRecordDataRoot fslog.c:3489 and UpdateRecordDataAllocation fslog.c:3697 cases, the memmove destination is Add2Ptre, le16tocpue-view.dataof...