CVE-2026-89612

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could provide a specially crafted NTFS boot sector containing an invalid Master File Table MFT Logical Cluster Number LCN. Due to an integer overflow during parsing, this could lead to an out-of-bounds memory access...

CVE-2026-89612

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locations as unsigned 64-bit LCNs, but parsentfsbootsector decoded them into an s64. A crafted high-bit value could therefore become...

EUVD-2026-76524

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locations as unsigned 64-bit LCNs, but parsentfsbootsector decoded them into an s64. A crafted high-bit value could therefore become...

CVE-2026-89612 ntfs: reject invalid MFT LCNs from boot sector

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locations as unsigned 64-bit LCNs, but parsentfsbootsector decoded them into an s64. A crafted high-bit value could therefore become...

CVE-2026-89612

CVE-2026-89612 affects the Linux kernel NTFS filesystem driver . The root cause is a type mismatch in parse_ntfs_boot_sector(): MFT and MFTMirr locations are stored as unsigned 64-bit LCNs in the NTFS boot sector but decoded into an s64 , allowing a crafted high-bit value to become negative and b...

cve-2025-24985

cve-2025-24985 Calcular el número de clúster de un archivo VHD para detectar desbordamiento. Sectores de arranque compatibles: MBR GPT Uso root@kitploit: python -m cve202524985 -f Configuración Nix root@kitploit: With direnv: direnv allow Or Without direnv: nix develop Peotry WIP Docker WIP Tarea...

PT-2026-90328

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locations as unsigned 64-bit LCNs, but parse ntfs boot sector decoded them into an s64. A crafted high-bit value could therefore becom...

CVE-2022-49553

The CVE-2022-49553 entry is about the Linux kernel NTFS3 filesystem (fs/ntfs3/super.c). The vulnerability arises when the NTFS BOOT sectors_per_clusters field is > 0x80, which is treated as a shift value; if the shift is too large, the code may compute invalid shifts (max NTFS cluster size is ...

PT-2025-8486 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the fs/ntfs3 module. The issue arises when the NTFS BOOT sectors per clusters field has a value greater than 0x80...

CVE-2021-31727

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to .\ZemanaAntiMalware, register with the driver using IOCTL...

CVE-2021-31727

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to .\ZemanaAntiMalware, register with the driver using IOCTL...

Angelfire: CIA’ Undetectable Implants Infect Windows Boot Sector

By Uzair Amir WikiLeaks suffered a cyber attack earlier today, but that couldnt stop the whistleblowing platform This is a post from HackRead.com Read the original post: Angelfire: CIA Undetectable Implants Infect Windows Boot Sector...

AngelFire: CIA Malware Infects System Boot Sector to Hack Windows PCs

A team of hackers at the CIA, the Central Intelligence Agency, allegedly used a Windows hacking tool against its targets to gain persistent remote access. As part of its Vault 7 leaks, WikiLeaks today revealed details about a new implant developed by the CIA, dubbed AngelFire, to target computers...

Symantec: Boot Sector Malware In Vogue

HED: Symantec: Boot Sector Malware Back In Style DEK: Malware writers are turning to boot record malware to infect systems – a throwback to earlier forms of malware. What’s old is new again. This time it’s boot sector malware – fashionable around the turn of the Millenium – that’s making a...