CVE-2026-90200

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow exists in the ntfs init from boot() function within the ntfs3 file system. The issue occurs during the validation of Master File Table (MFT) cluster numbers read from the boot sector. Specifically, the multiplication of the mlcn or mlcn2 variables by sct per clst can wrap around when the cluster numbers are sufficiently large, allowing malformed records to bypass volume size checks. This typically results in mount failures at the block layer rather than more severe impacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.