Out-of-Bounds Read in Linux Kernel Affecting NTFS Attribute Data

CVE-2026-98136

What is CVE-2026-98136?

A vulnerability exists in the Linux kernel that relates to the improper handling of the $AttrDef table within the NTFS file system. This vulnerability arises when the size of the $AttrDef data is incorrectly validated, allowing the loop that processes attribute definitions to read beyond allocated memory boundaries. Specifically, it tracks only the start of each entry rather than ensuring the entire entry fits within the specified size, resulting in potential out-of-bounds access. This condition can be triggered during file creation, leading to serious security implications. The issue has been patched by enhancing the guard conditions to ensure that the entire entry is validated against the allocated size. Users are advised to update their systems to mitigate risks associated with this vulnerability.

References