CVE-2026-89779

A flaw was found in the Linux kernel's ntfs3 filesystem driver. This vulnerability allows a local attacker to craft an Extended Attribute EA record with an undersized ef-size value. When processed, this can lead to an out-of-bounds read, resulting in the disclosure of sensitive heap memory to...

CVE-2026-89617

A flaw was found in the Linux kernel's NTFS3 filesystem driver. An attacker with local access could craft a malicious NTFS log file. During log replay, insufficient validation of the lcnsfollow field in a DIRPAGEENTRY could lead to an out-of-bounds write. This memory corruption could result in a...