CVE-2026-64532
kernel: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 27, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel ntfs3 driver. UpdateRecordDataRoot and UpdateRecordDataAllocation take view.data_off from an on-disk directory entry and use it as a memmove destination without checking it against the entry size. Mounting a crafted NTFS image can write past the end of that entry.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')