CVE-2026-89781

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the read log rec buf() function within the NTFS3 file system. The issue occurs because the log->record header len value is taken directly from the on-disk restart area and is only verified for 8-byte alignment. This allows the calculated offset to exceed the log->page size, causing an underflow when calculating the remaining bytes. Consequently, the memcpy() function reads beyond the buffer returned by read log page(), potentially leaking adjacent slab memory into the replay buffer. This can be triggered by mounting a specially crafted NTFS image.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.