CVE-2026-97437

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the ntfs3 driver. In the ntfs dir emit() function, the bounds check incorrectly compares a character count fname->name len against a byte count e->size without accounting for the UTF-16LE encoding (2 bytes per character) or the ATTR FILE NAME header size. A crafted NTFS image with a small e->size and a large fname->name len can bypass this check, leading the ntfs utf16 to nls() function to read past the entry boundary. Additionally, the hdr find e() function lacks validation for key size, which could allow comparison functions to read past entry boundaries during the lookup path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.