CVE-2026-89779

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

CVE-2026-89779 fs/ntfs3: validate ef->size covers the record's name and value

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

CVE-2026-89779

A slab-out-of-bounds read in the Linux kernel's ntfs3 filesystem driver occurs when a crafted NTFS image contains an Extended Attribute (EA) record with a mismatched ef->size and elength. The function ntfs_read_ea() in fs/ntfs3/xattr.c validates only that the record fits in the remaining buffe...