CVE-2026-64432

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS3 file system during the analysis pass of $LogFile journal replay. The log replay() function copies Logical Cluster Numbers (LCNs) from action log records into a Dirty Page Table (DPT) entry without properly bounding the destination index. A specially crafted NTFS image can trigger a kernel slab out-of-bounds write at mount time. This occurs when the dp->lcns follow capacity is smaller than lrh->lcns follow, or when lrh->target vcn is smaller than dp->vcn, causing a subtraction wrap to a large size t value, which allows the index to exceed the allocated page lcns[] array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.