CVE-2026-64532

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS3 file system where the do action() function fails to properly validate the view.data off field of an on-disk NTFS DE within an INDEX ROOT or INDEX BUFFER. Specifically, in the UpdateRecordDataRoot and UpdateRecordDataAllocation cases, the memmove() function uses a destination calculated from view.data off without verifying if view.data off plus the data length exceeds the entry size e->size. This lack of validation can lead to an out-of-bounds write, where data is written past the end of the NTFS DE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.