Buffer Overflow Vulnerability in Linux Kernel's NTFS3 Handling

CVE-2026-64533

What is CVE-2026-64533?

A vulnerability in the Linux kernel's NTFS3 file handling allows a malformed filesystem image to provide an oversized lcns_follow value during log replay, resulting in a buffer overflow. Specifically, the conversion process of DIR_PAGE_ENTRY_32 records to DIR_PAGE_ENTRY records relies on the on-disk lcns_follow field for memmove() computations. However, the validation mechanism does not appropriately constrain lcns_follow relative to the valid entry sizes, which can lead to unauthorized memory access beyond allocated limits. This flaw underscores the importance of stringent validation checks to prevent exploitation through malformed filesystem structures.

References