CVE-2026-31716

A flaw was found in the Linux kernel's NTFS3 file system driver. A local attacker with control over a corrupted filesystem could exploit an out-of-bounds write vulnerability during journal replay. This flaw occurs because the rec->used value is not properly validated, leading to incorrect memory calculations. An attacker could potentially cause a denial of service or information disclosure by triggering an out-of-bounds memory write.