CVE-2026-89779

A flaw was found in the Linux kernel's ntfs3 filesystem driver. This vulnerability allows a local attacker to craft an Extended Attribute (EA) record with an undersized ef->size value. When processed, this can lead to an out-of-bounds read, resulting in the disclosure of sensitive heap memory to userspace. This information disclosure could potentially expose confidential system data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.