CVE-2026-64533

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fs/ntfs3 component where the log replay() function fails to properly validate the lcns follow field when converting DIR PAGE ENTRY 32 records into DIR PAGE ENTRY records during the replay of version 0 restart tables. Because the memmove() length is derived directly from this on-disk field without being constrained relative to the entry size, a malformed filesystem image can provide an oversized lcns follow value. This leads to memory access beyond the bounds of the allocated restart table buffer and subsequent out-of-bounds access during iteration over page lcns[].

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.