CVE-2026-64431

kernel: ntfs: avoid calling post_write_mst_fixup() for invalid index_block

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's NTFS file system driver. A remote attacker could exploit this vulnerability by providing a specially crafted NTFS image, leading to out-of-bounds memory access. This memory corruption can cause the system to crash, resulting in a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-787 · Out-of-bounds Write