CVE-2026-98136

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the NTFS driver. The function ntfs attr find in attrdef() iterates through the in-memory $AttrDef table, but the loop condition only validates the start of each entry rather than the entire entry size. Since the attr def structure is 160 bytes and the guard reads ad->type at offset 128, a volume with an $AttrDef data size smaller than a single entry (e.g., 120 bytes) causes the system to read memory past the allocation. This issue can be triggered during file creation via the ntfs attr size bounds check() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.