CVE-2026-89610

A flaw was found in the Linux kernel's NTFS component. The mapping pairs decoder fails to verify if a run length extends beyond the volume boundary. A local attacker could exploit this by providing a malformed NTFS image with a crafted mapping pairs array. This could lead to memory corruption and...

CVE-2026-89610

CVE-2026-89610 affects the Linux kernel NTFS filesystem driver. The mapping pairs decoder validates that a starting LCN is within the volume but does not check whether the run (LCN + length) extends beyond the volume boundary. A malformed NTFS image with a crafted mapping pairs array can cause th...