CVE-2026-80673

A flaw was found in the Linux kernel's NTFS file system driver. An attacker can craft a malicious on-disk attribute list that, when processed, causes an out-of-bounds read. This occurs because a look-ahead entry in the attribute list is not properly validated, allowing data to be read beyond the...

UBUNTU-CVE-2026-80674

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden the validator A base inode's $ATTRIBUTELIST is sanity-checked by loadattributelist only on the non-resident path; ntfsreadlockedinode copies a resident attribute list into...

UBUNTU-CVE-2026-80672

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfscheckrestartarea validates that the $LogFile restart area and its trailing log client record array fit within the system page size: u16 raofs, ralen, caofs; ... ralen =...

CVE-2026-80674

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden the validator A base inode's $ATTRIBUTELIST is sanity-checked by loadattributelist only on the non-resident path; ntfsreadlockedinode copies a resident attribute list into...

CVE-2026-80672

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfscheckrestartarea validates that the $LogFile restart area and its trailing log client record array fit within the system page size: u16 raofs, ralen, caofs; ... ralen =...

CVE-2026-80674 ntfs: validate resident attribute lists and harden the validator

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden the validator A base inode's $ATTRIBUTELIST is sanity-checked by loadattributelist only on the non-resident path; ntfsreadlockedinode copies a resident attribute list into...

CVE-2026-80673

Linux kernel NTFS driver contains a slab out-of-bounds read in ntfs_external_attr_find(). When resolving an attribute lookup with a non-zero @lowest_vcn, the function reads lowest_vcn (offset 8) and name_offset from the next $ATTRIBUTE_LIST entry without full bounds validation, allowing a crafted...

CVE-2026-80672 ntfs: fix u16 truncation of restart-area length check

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfscheckrestartarea validates that the $LogFile restart area and its trailing log client record array fit within the system page size: u16 raofs, ralen, caofs; ... ralen =...

CVE-2026-80673 ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfsexternalattrfind When resolving an attribute lookup with a non-zero @lowestvcn, ntfsexternalattrfind peeks at the next $ATTRIBUTELIST entry to decide whether to keep searchin...

PT-2026-82973

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfs external attr find When resolving an attribute lookup with a non-zero @lowest vcn, ntfs external attr find peeks at the next $ATTRIBUTE LIST entry to decide whether to keep...

CVE-2026-72354

A flaw was found in the Linux kernel's NTFS file system driver. A local attacker could trigger a use-after-free vulnerability during Master File Table MFT writeback operations. This occurs due to a timing issue where memory is freed while still being accessed, which can lead to a system crash,...

CVE-2026-72353

A flaw was found in the Linux kernel's NTFS file system driver. A use-after-free vulnerability exists in the ntfsattrfallocate function, where a runlist element is accessed after its memory has been deallocated by a concurrent operation. A local attacker could exploit this to trigger a system...

CVE-2026-72210

A flaw was found in the Linux kernel's NTFS filesystem driver. An error in how the driver checks the boundaries of data it processes, specifically an 'off-by-one' error, allows it to read one byte beyond its intended memory region. This 'out-of-bounds read' could potentially lead to the disclosur...

CVE-2026-72209

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could craft a malicious NTFS image that causes the kernel to read beyond the intended memory boundary when processing $FILENAME attributes. This out-of-bounds read could lead to information disclosure or potentially a...

CVE-2026-72208

A flaw was found in the Linux kernel's NTFS file system driver. A missing bounds check when processing Extended Attribute EA entries in the ntfsealookup and ntfslistxattr functions could allow a local attacker to craft a malicious NTFS file system. When this file system is mounted, it could lead ...

CVE-2026-72207

A flaw was found in the NTFS file system driver in the Linux kernel. When the ntfsresidentattrresize function attempts to free space by converting resident attributes to non-resident, it incorrectly selects zero-length $DATA attributes for this conversion. This can lead to fsck file system check...

CVE-2026-72206

A flaw was found in the Linux kernel's NTFS filesystem driver. Insufficient validation of index block headers within INDX blocks could allow a local attacker to craft a malicious NTFS filesystem image. When this image is processed by the kernel, it could lead to a kernel panic due to an...

CVE-2026-72205

A flaw was found in the Linux kernel's NTFS filesystem driver. When an attempt to mount an NTFS volume fails, the ntfsfillsuper function's error handling path does not properly free all volume-wide resources. This oversight leads to a silent resource leak, where memory and other resources...

CVE-2026-72204

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from insufficient validation of the $INDEXROOT header, which is crucial for managing directory and file indexes. An attacker could potentially craft a specially malformed NTFS file system. Processing this...

CVE-2026-72202

A flaw was found in the Linux kernel's NTFS filesystem driver. When calculating free clusters or Master File Table MFT records, a temporary state object is allocated on the heap. If this allocation fails, processes waiting for these counts can become unresponsive, leading to a denial of service D...