CVE-2026-89617

A flaw was found in the Linux kernel's NTFS3 filesystem driver. An attacker with local access could craft a malicious NTFS log file. During log replay, insufficient validation of the lcns_follow field in a DIR_PAGE_ENTRY could lead to an out-of-bounds write. This memory corruption could result in a system crash (denial of service) or potentially allow for further exploitation.

This vulnerability is rated as having an Important impact because memory corruption in kernel context can allow a local attacker to trigger a system crash or potentially escalate privileges. However, Red Hat Enterprise Linux is not affected as the NTFS3 filesystem module is not built or enabled in standard Red Hat kernels. Exploitation requires mounting a specially formatted filesystem, which is typically restricted to privileged administrators and unavailable in default deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.