CVE-2026-46072
kernel: ntfs3: add buffer boundary checks to run_unpack()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's ntfs3 module. A local attacker, by mounting a specially crafted NTFS (New Technology File System) image containing truncated run data, could trigger an out-of-bounds heap read. This vulnerability allows for the disclosure of sensitive information from kernel memory.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1284 · Improper Validation of Specified Quantity in Input