Out-of-Bounds Access in Linux Kernel's NTFS Module

CVE-2026-89782

What is CVE-2026-89782?

A vulnerability in the Linux kernel's NTFS module allows for out-of-bounds memory access due to improper indexing during log file replay. An attacker can craft an NTFS image that, when mounted, triggers an exploit through a manipulation of the restart table size exceeding its defined limit. This could lead to potential system crashes and unauthorized memory access. The vulnerability arises from inadequate checks on transaction IDs, enabling attackers to manipulate memory allocation, resulting in a risk for affected systems. It is crucial for users and administrators to ensure their systems are updated to prevent exploitation.

References