Out-of-Bounds Read Vulnerability in Linux Kernel NTFS Handling

CVE-2026-80869

What is CVE-2026-80869?

A vulnerability in the Linux kernel's NTFS file system allows for an out-of-bounds read during the processing of attribute lists. Specifically, the validation checks in the 'ntfs_read_inode_mount()' function are insufficient, enabling crafted $MFT entries to bypass security measures. When these entries are processed, they can lead to memory access violations, potentially exposing sensitive data or causing system crashes. The issue arises when the attribute length is manipulated, allowing an attacker to exploit the kernel's memory management routines. A patch has been implemented to ensure robust validation of attribute entries, significantly enhancing the security of NTFS handling within the Linux kernel.

References