CVE-2026-53027

kernel: fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 24, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's fs/ntfs3 component. When handling compressed or sparse attributes with frame-aligned clusters, a missing run load for vcn0 can occur if vcn0 resides in a different attribute segment. This oversight can lead to a kernel warning (WARN_ON(1)) during a run lookup, potentially causing system instability or a Denial of Service (DoS). A local user could trigger this condition.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-166 · Improper Handling of Missing Special Element