CVE Database›Document archive›CVE-2026-53029

CVE-2026-53029

kernel: fs/ntfs3: prevent uninitialized lcn caused by zero len

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 24, 2026

Updated · June 27, 2026

Description

A flaw was found in the Linux kernel's ntfs3 filesystem driver. This vulnerability occurs due to an uninitialized local variable (lcn) when handling zero-length data during I/O operations. An attacker could potentially exploit this flaw to cause a denial of service or information disclosure due to unpredictable behavior resulting from the use of uninitialized memory.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-824 · Access of Uninitialized Pointer