CVE-2026-46062

kernel: ntfs3: fix integer overflow in run_unpack() volume boundary check

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's ntfs3 filesystem driver. An integer overflow vulnerability exists in the run_unpack() function's volume boundary check. This flaw occurs because the check uses raw addition, which can wrap around for large values, potentially bypassing validation. This could lead to system instability or data corruption.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-190 · Integer Overflow or Wraparound