CVE-2026-64432

kernel: fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's ntfs3 file system driver. A local attacker can exploit this vulnerability by mounting a specially crafted NTFS image. This can lead to a kernel slab out-of-bounds write during the $LogFile journal replay process, potentially causing a system crash or denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-787 · Out-of-bounds Write