CVE-2026-80598

Summary

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: fix out-of-bounds read in decompress_lznt

decompress_lznt() does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read.

Add index bounds checking to prevent the OOB access.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1113fa5b01a47a1a4cdbb9c695197ca6215f02a8affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 61415ffa365d2eca6986914afd0d1412444aa1ddaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < bd77afca2ae9b6d44d37902e3ad672ebb028b070affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c694f8ea2611e7413b3f04ee47e04a9b7b45817baffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ff05a98150ebb2b03919a9c05c576681e86abbb7affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a93980141253c932aa6ae5d4422d90e0162dc774affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7160a57192fb16d7a6fa9b7f5c7ac341d2444a89affected
LinuxLinux0 < 5.15.212affected
LinuxLinux0 < 6.1.178affected
LinuxLinux0 < 6.6.145affected
LinuxLinux0 < 6.12.97affected
LinuxLinux0 < 6.18.40affected
LinuxLinux0 < 7.1.5affected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References