Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed overflow check in mienumattr...

CVE-2026-90199

A flaw was found in the Linux kernel's fs/ntfs3 file system driver. An issue in the mienumattr function, responsible for validating virtual cluster numbers VCNs for non-resident attributes, could allow a local attacker to craft a malformed on-disk attribute. This malformed attribute, with an...

SUSE CVE-2026-90199

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...

Linux Distros Unpatched Vulnerability : CVE-2026-90199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evc...

AZL-102422 CVE-2026-90199 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...

DEBIAN-CVE-2026-90199

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...

CVE-2026-90199

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...

CVE-2026-90199 fs/ntfs3: reject out-of-range evcn in mi_enum_attr()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...

CVE-2026-90199

CVE-2026-90199 affects the Linux kernel's fs/ntfs3 filesystem driver in the mi_enum_attr() function. When the end virtual cluster number (evcn ) equals U64_MAX , the expression evcn + 1 wraps to zero, causing any start VCN to pass the boundary check. A malformed on-disk NTFS3 attribute with svcn ...

CVE-2026-90199 fs/ntfs3: reject out-of-range evcn in mi_enum_attr()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...

EUVD-2026-81792

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...

CVE-2026-90199: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...

CVE-2026-90199: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Added bounds checking to mienumattr. Bounds checking was added to ensure that no attribute stray beyond the valid memory region...

ROS-20260129-73-0008

A vulnerability in the mienumattr function of the fs/ntfs3/record.c module of the Linux operating system kernel file system support is related to access delimitation flaws. Exploitation of the vulnerability could allow an attacker to gain access to protected information or cause a denial of servi...

ROS-20260113-7368

A vulnerability in the mienumattr function in the fs/ntfs3/record.c module of the ntfs3 file system of the Linux kernel is related to privilege escalation. Exploitation of the vulnerability may allow an intruder to affect the confidentiality, integrity and availability of protected information...

ROS-20251017-01

Vulnerability of mienumattr function of fs/ntfs3 component of Linux kernel is related to buffer copying without input data verification. Exploitation of the vulnerability allows an intruder to gain access to confidential data, violate its integrity, and cause a denial of service. Vulnerability of...

fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

...

fs/ntfs3: Fixed overflow check in mi_enum_attr()

...

ROS-20250303-06

The vulnerability of the ntfsreadmft function in the fs/ntfs3/inode.c module of the Linux kernel is related to the following issues lack of validation of allowed attribute sizes. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability of mienumattr...