CVE-2026-90133

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A heap out-of-bounds write exists in the NTFS driver. The function ntfs ir to ib() copies entries from index root into a buffer of index block size bytes without verifying if the entries fit within the available space. Because the validator ntfs index root inconsistent() only checks for internal logical consistency and not against the index block size, a crafted filesystem image can trigger writes past the end of the allocated memory buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.