Linux Kernel Boot Sector Vulnerability in NTFS by Linux Foundation

CVE-2026-98135

What is CVE-2026-98135?

A vulnerability exists in the Linux NTFS implementation where the 'sectors_per_cluster' field in the boot sector can be improperly validated. This issue occurs when non-standard values or zero are accepted instead of rejecting them. This can lead to undefined behavior, particularly when the system attempts to shift bits using an incorrect shift exponent, which may lead to potential exploitation avenues. The patch introduced ensures that only power-of-two values are accepted for 'sectors_per_cluster', enhancing the robustness of the system.

References