CVE-2026-53029

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ntfs3 file system where a zero value for len can lead to the use of an uninitialized lcn variable. This occurs because when run lookup entry() fails and returns false, the *len value becomes 0. If the new value and error value are also 0, the logic in the attr data get block locked() function proceeds to a success state, causing *lcn to be accessed before it has been properly set. This was identified in the ntfs iomap begin() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.