SB20260828104 - Integer overflow in Linux kernel ntfs

Description

This security bulletin contains information about 1 vulnerability.

1) Integer overflow (CVE-ID: CVE-2026-80672)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to an integer truncation leading to an out-of-bounds read in ntfs_check_restart_area() and ntfs_check_log_client_array() when mounting a crafted NTFS image. A local user can provide a specially crafted NTFS image to disclose sensitive information.

The issue is reachable during mount time while processing the $LogFile restart area and its log client record array.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/07a4751ef3ccc8bfd17bfbb16e5003c03161790d
• https://git.kernel.org/stable/c/390936fb15053d8d8991ca3a22776e251a5a7f2f