CVE-2026-99107

A flaw was found in the Linux kernel's NTFS file system driver. When resizing file attributes, the driver incorrectly passes a base Master File Table (MFT) record pointer instead of an extent record pointer, leading to improper buffer size calculations during memory operations. A local attacker could exploit this flaw by manipulating file attributes on a mounted NTFS file system, potentially causing memory corruption and a system crash resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.