SECUFOCUSNOW
Home›CVE index›CVE-2026-64532
Review reviewHigh

CVE-2026-64532

Linux

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} In do_action()'s UpdateRecordDataRoot (fslog.c:3489) and UpdateRecordDataAllocation (fslog.c:3697) cases, the memmove destination is `Add2Ptr(e, le16_to_cpu(e->view.data_off))`, where e->view.data_off comes from an on-disk NTFS_DE inside an INDEX_ROOT or INDEX_BUFFER. Neither case validates view.data_off + dlen against e->size; the existing check_if_index_root / check_if_alloc_index helpers walk the entry chain and validate the entry's offset, but no...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.27
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} In do_action()'s UpdateRecordDataRoot (fslog.c:3489) and UpdateRecordDataAllocation (fslog.c:3697) cases, the memmove destination is `Add2Ptr(e, le16_to_cpu(e->view.data_off))`, where e->view.data_off comes from an on-disk NTFS_DE inside an INDEX_ROOT or INDEX_BUFFER. Neither case validates view.data_off + dlen against e->size; the existing check_if_index_root / check_if_alloc_index helpers walk the entry chain and validate the entry's offset, but no...

Affected product and versions

Product
Linux
Affected versions
>= b46acd6a6a627d876898e1c84d3f84902264b445 < b20e5a709d8bd190d6e4645606763c7423e694c1, >= b46acd6a6a627d876898e1c84d3f84902264b445 < d41b382068ca4e64e421f736cdd700095464b6ac, >= b46acd6a6a627d876898e1c84d3f84902264b445 < 429d653ca641d38a78609b8f62e81a0a5c780a2d, >= b46acd6a6a627d876898e1c84d3f84902264b445 < 315d3a9a48b49f889da3d858a9307e677cb9e1bd, >= b46acd6a6a627d876898e1c84d3f84902264b445 < be306b8d9143a9c076c804a7ca025d69caf9c448, >= b46acd6a6a627d876898e1c84d3f84902264b445 < 36feda687afebae24c472202694448738809c411, >= b46acd6a6a627d876898e1c84d3f84902264b445 < 3e127829e57f5190f612412ece4541cb96d5ec7a, >= 5.15
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2026-64532 — Linux | SECUFOCUS NOW