CVE-2026-53029
kernel: fs/ntfs3: prevent uninitialized lcn caused by zero len
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 24, 2026
Updated · June 27, 2026
Description
A flaw was found in the Linux kernel's ntfs3 filesystem driver. This vulnerability occurs due to an uninitialized local variable (lcn) when handling zero-length data during I/O operations. An attacker could potentially exploit this flaw to cause a denial of service or information disclosure due to unpredictable behavior resulting from the use of uninitialized memory.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-824 · Access of Uninitialized Pointer