Riskcovery

CVE-2026-99107

ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize

State
Published
Severity
Not scored
Published
Oct 28, 2026
Updated
Oct 28, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize

ntfs_new_attr_flags() passes the wrong MFT record to ntfs_attr_record_resize(). When the attribute is in an extent record, ctx->mrec points to the extent but the function receives the base record pointer m, causing incorrect size calculations in memmove.

Fix by passing ctx->mrec (the actual MFT record containing the attribute) instead of m (the base MFT record) to ntfs_attr_record_resize().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fc053f05ca282a5e760b41f6560ac835c4e28037 to before 0a9122cada749447dfb6d67aa3fed4ee1982231cAffected
  • fc053f05ca282a5e760b41f6560ac835c4e28037 to before 8d139e3635c86e2c97c78d55538ce0b00b6d9986Affected
LinuxLinux
  • 7.1Affected
  • before 7.1Not affected
  • 7.2.13 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.