Numeric Truncation Error in Linux kernel - CVE-2026-89782

Vulnerability identifier: #VU150508

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-89782

CWE-ID: CWE-197

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause an out-of-bounds memory access.

The vulnerability exists due to integer truncation in the NTFS3 restart table handling in fs/ntfs3/fslog.c when replaying a crafted NTFS $LogFile. A remote attacker can mount a crafted NTFS image to cause an out-of-bounds memory access.

Linux kernel
Debian Linux
Ubuntu
linux (Ubuntu package)
linux-kvm (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-oracle (Ubuntu package)
linux-lowlatency (Ubuntu package)
linux-gke (Ubuntu package)
linux-aws-5.15 (Ubuntu package)
linux-lowlatency-hwe-5.15 (Ubuntu package)
linux-hwe-5.15 (Ubuntu package)
linux-fips (Ubuntu package)
linux-azure-5.15 (Ubuntu package)
linux-azure-fde-5.15 (Ubuntu package)
linux-ibm-5.15 (Ubuntu package)
linux-gkeop (Ubuntu package)
linux-intel-iotg (Ubuntu package)
linux-nvidia-tegra (Ubuntu package)
linux-realtime (Ubuntu package)
linux-nvidia-tegra-igx (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-ibm (Ubuntu package)
linux-intel-iotg-5.15 (Ubuntu package)
linux-oracle-5.15 (Ubuntu package)
linux-gcp-5.15 (Ubuntu package)
linux-nvidia-tegra-5.15 (Ubuntu package)
linux-azure-fde (Ubuntu package)
linux-intel-iot-realtime (Ubuntu package)
linux-gcp-fips (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux (Debian package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - addressed in versions 5.15.0-202.212, 7.0.0-42.42
linux-kvm (Ubuntu package) - update to 5.15.0-1111.116
linux-aws (Ubuntu package) - addressed in versions 5.15.0-1119.126, 7.0.0-1016.17
linux-gcp (Ubuntu package) - addressed in versions 5.15.0-1120.130, 7.0.0-1016.18
linux-azure (Ubuntu package) - update to 5.15.0-1125.134
linux-oracle (Ubuntu package) - addressed in versions 5.15.0-1116.122, 7.0.0-1015.16
linux-lowlatency (Ubuntu package) - update to 5.15.0-197.207
linux-gke (Ubuntu package) - update to 5.15.0-1115.121
linux-aws-5.15 (Ubuntu package) - update to 5.15.0-1119.126~20.04.1
linux-lowlatency-hwe-5.15 (Ubuntu package) - update to 5.15.0-197.207~20.04.1
linux-hwe-5.15 (Ubuntu package) - update to 5.15.0-202.212~20.04.1
linux-fips (Ubuntu package) - update to 5.15.0-202.212+fips1
linux-azure-5.15 (Ubuntu package) - update to 5.15.0-1125.134~20.04.1
linux-azure-fde-5.15 (Ubuntu package) - update to 5.15.0-1124.133~20.04.1
linux-ibm-5.15 (Ubuntu package) - update to 5.15.0-1113.117~20.04.1
linux-gkeop (Ubuntu package) - update to 5.15.0-1102.110
linux-intel-iotg (Ubuntu package) - update to 5.15.0-1114.120
linux-nvidia-tegra (Ubuntu package) - addressed in versions 5.15.0-1070.72, 6.8.0-1038.42
linux-realtime (Ubuntu package) - update to 5.15.0-1118.127
linux-nvidia-tegra-igx (Ubuntu package) - update to 5.15.0-1059.59
linux-nvidia (Ubuntu package) - update to 5.15.0-1114.115
linux-ibm (Ubuntu package) - addressed in versions 5.15.0-1113.117, 7.0.0-1017.17
linux-intel-iotg-5.15 (Ubuntu package) - update to 5.15.0-1114.120~20.04.1
linux-oracle-5.15 (Ubuntu package) - update to 5.15.0-1116.122~20.04.1
linux-gcp-5.15 (Ubuntu package) - update to 5.15.0-1120.130~20.04.1
linux-nvidia-tegra-5.15 (Ubuntu package) - update to 5.15.0-1070.72~20.04.1
linux-azure-fde (Ubuntu package) - update to 5.15.0-1124.133
linux-intel-iot-realtime (Ubuntu package) - update to 5.15.0-1111.115
linux-gcp-fips (Ubuntu package) - update to 5.15.0-1120.130+fips1
linux-aws-fips (Ubuntu package) - update to 5.15.0-1119.126+fips1
linux-azure-fips (Ubuntu package) - update to 5.15.0-1125.134+fips1
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17
linux (Debian package) - update to 6.12.111-1

• https://git.kernel.org/stable/c/111f8d74a19d85942ecbb3aba78f6f3c88e59391
• https://git.kernel.org/stable/c/339e59996ff193adcf1c438cf05f19e753beb3a7
• https://git.kernel.org/stable/c/967a5ff8a614d10126b6d46db1ac040948d6cb42
• https://git.kernel.org/stable/c/aad605a450611e2a7b7cf9dd5724004d39192bfb
• https://git.kernel.org/stable/c/be218a01aadffe33ed4fc73e25276d676ebbd09d
• https://git.kernel.org/stable/c/caa0ec3fc44a13d7c21d78e4722f4f05f87ccf56
• https://git.kernel.org/stable/c/ecde45cd81dc28f5696c312c5ce5a509962e9ab1

• Numeric Truncation Error in Linux kernel ntfs3
• Debian update for linux
• Ubuntu update for linux-azure-fde
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more
• Ubuntu update for linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx
• Ubuntu update for linux, linux-aws, linux-aws-5.15 and more
• Ubuntu update for linux-nvidia-tegra