CVE-2026-45935
kernel: fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's NTFS3 filesystem driver. Insufficient bounds checking when processing log records in the DeleteIndexEntryRoot function allows a local attacker to provide a maliciously large entry size. This can lead to a heap buffer overflow, a type of memory corruption, which may result in a denial of service or potentially arbitrary code execution.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-805 · Buffer Access with Incorrect Length Value