CVE-2026-89613: ntfs: reject invalid empty mapping pairs
In the Linux kernel, the following vulnerability has been resolved:
ntfs: reject invalid empty mapping pairs
Reject an attribute with empty mapping pairs if it has inconsistent highest VCN and size.
Affected Software
Event History
Frequently Asked Questions
What filesystem data must an attacker control to trigger this issue?
The attacker would need to supply an NTFS attribute containing empty mapping pairs with inconsistent highest VCN and size values. The provided information does not establish whether this can be reached through a mounted removable drive, disk image, or another NTFS access path.
How can I identify potentially affected NTFS metadata?
Inspect NTFS attributes with empty mapping pairs and compare their highest VCN against the attribute size. Attributes where those fields are inconsistent are the malformed condition addressed by the fix.
What mitigation is available if the kernel update cannot be applied immediately?
Avoid processing NTFS filesystems or images from untrusted sources when possible. The available data does not provide a configuration-based workaround.