CVE-2026-64532

A flaw was found in the Linux kernel ntfs3 driver. UpdateRecordDataRoot and UpdateRecordDataAllocation take view.dataoff from an on-disk directory entry and use it as a memmove destination without checking it against the entry size. Mounting a crafted NTFS image can write past the end of that ent...

CVE-2026-64532

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFSDE view.dataoff in UpdateRecordDataRoot,Allocation In doaction's UpdateRecordDataRoot fslog.c:3489 and UpdateRecordDataAllocation fslog.c:3697 cases, the memmove destination is Add2Ptre, le16tocpue-view.dataof...