CVE-2026-46062: ntfs3: fix integer overflow in run_unpack() volume boundary check
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: fix integer overflow in rununpack() volume boundary check
The volume boundary check lcn + len > sbi->used.bitmap.nbits uses raw addition which can wrap around for large lcn and len values, bypassing the validation. Use checkaddoverflow() as is already done for the adjacent prevlcn + dlcn and vcn64 + len checks added by commit 3ac37e100385 ("ntfs3: Fix integer overflow in rununpack()").
Found by fuzzing with a source-patched harness (LibAFL + QEMU).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Upgrade
Upgrade
Linux kernel (ntfs3)to a version that resolves this vulnerability.Patch 3ac37e100385
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46062?
The severity of CVE-2026-46062 is high with a CVSS score of 7.8.
How do I fix CVE-2026-46062?
To fix CVE-2026-46062, update to the latest version of the Linux kernel that contains the patched ntfs3 code.
What is the main issue described in CVE-2026-46062?
CVE-2026-46062 describes an integer overflow vulnerability in the volume boundary check in the ntfs3 driver of the Linux kernel.
Which systems are affected by CVE-2026-46062?
CVE-2026-46062 affects systems running vulnerable versions of the Linux kernel, particularly those using ntfs3.
What can happen if CVE-2026-46062 is exploited?
Exploitation of CVE-2026-46062 can lead to bypassing validation checks, potentially resulting in data corruption or unauthorized access.