Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-99107

ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize ntfs_new_attr_flags() passes the wrong MFT record to ntfs_attr_record_resize(). When the attribute is in an extent record, ctx->mrec points to the extent but the function receives the base record pointer m, causing incorrect size calculations in memmove. Fix by passing ctx->mrec (the actual MFT record containing the attribute) instead of m (the base MFT record) to ntfs_attr_record_resize().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fc053f05ca282a5e760b41f6560ac835c4e28037 to < 0a9122cada749447dfb6d67aa3fed4ee1982231caffected
  • fc053f05ca282a5e760b41f6560ac835c4e28037 to < 8d139e3635c86e2c97c78d55538ce0b00b6d9986affected

Linux Linux

Default version status: affected

  • 7.1affected
  • 0 to < 7.1unaffected
  • 7.2.13 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References