Page Alignment Vulnerability in Linux Kernel Affecting NTFS3

CVE-2026-80868

What is CVE-2026-80868?

A vulnerability has been found in the Linux kernel related to the handling of inline data in the NTFS3 filesystem. The issue arises during the allocation of iomap inline data, where improper page alignment can lead to inconsistencies. Specifically, the function 'iomap_inline_data_valid' checks whether the allocated inline data fits within the confines of a page. However, if the data is allocated using 'kmemdup', it may not adhere to page-alignment standards, resulting in potential failures in the validation check. The fix involves utilizing the 'alloc_page' function to ensure that inline data allocation maintains proper page alignment, thus mitigating the associated risks.

References