CVE-2026-89611

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS driver where the ntfs attr update meta() function fails to properly validate the name offset when converting between non-sparse and sparse attributes. Converting to sparse attributes adds a compressed size field, requiring eight additional bytes. Because the validator does not ensure that name offset is within safe boundaries or that sufficient space is available, a malicious Master File Table (MFT) record could cause the name to be written beyond the attribute boundary or overlap with mapping pairs, leading to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.