CVE-2026-80673

CVE-2026-80673 affects the Linux kernel NTFS subsystem in ntfs_external_attr_find(). When resolving an attribute lookup with a non-zero lowest_vcn, the function peeks at the next $ATTRIBUTE_LIST entry but validates only bytes 0–6 before reading lowest_vcn (an __le64 at offset 8) and the name at n...