Out-of-bounds Read Vulnerability in Linux Kernel NTFS3 by Linux Foundation

CVE-2026-89785

What is CVE-2026-89785?

A vulnerability exists in the Linux Kernel NTFS3 module that allows an out-of-bounds read when parsing index root attributes of the $Extend/$Reparse and $Extend/$ObjId metafiles. This occurs due to insufficient checks leading to potential reads beyond allocated memory, which can compromise data integrity while mounting specially crafted NTFS images. To mitigate this risk, system administrative privileges (CAP_SYS_ADMIN) are required, emphasizing the importance of careful usage of mounts.

References