CVE-2026-89779

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS3 file system where the ntfs read ea() function fails to verify if the ef->size variable is sufficient to hold the record's name length, a padding byte, and the elength variable. A specially crafted image can bypass validation by providing a small ef->size and a large elength. Consequently, the ntfs get ea() function trusts the elength value and performs a memory copy that exceeds the allocated buffer size, resulting in a slab-out-of-bounds read. This allows heap memory to be leaked to userspace through the getxattr() system call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.