CVE-2026-80673

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS driver where the ntfs external attr find() function fails to properly validate the look-ahead attribute-list entry when resolving an attribute lookup with a non-zero lowest vcn. The function uses insufficient bounds checking for the next $ATTRIBUTE LIST entry, allowing an attacker-controlled, non-8-aligned length to be used. This can lead to a slab out-of-bounds read when the inode is read, as the system may access lowest vcn and the name at name offset beyond the end of the allocated attribute-list buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.