UBUNTU-CVE-2026-89615: High severity ubuntu/linux-hwe-edge vulnerability

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound pagelcns[] index by the log record The copylcns loop and the redo shorten loop index pagelcns[] at j + i, where i runs up to the log record's lcnsfollow. That count is checked only against the record's own length, not the target entry, so checkdptable() (which validates the entry's lcnsfollow) does not cover it: the copylcns entry may even be freshly allocated after that check, and finddp() bounds j but not i. A crafted record thus overflows pagelcns[] of an otherwise valid entry. Add dprangeok() and reject, before each loop, any record whose run does not fit the entry. These are the only two pagelcns[] accesses indexed by the record rather than the entry, so together with the entry validation every access is now bounded. [almaz.alexandrovich@paragon-software.com: original patch contained changes to the problem already handled, applied partly]