CVE-2026-64532

Linux Kernel: Mehrere Schwachstellen

Debian Linux, Amazon Linux 2, Nutanix AOS, Red Hat Enterprise Linux, IBM QRadar SIEM, Red Hat OpenShift, Nutanix Prism…

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} In do_action()'s UpdateRecordDataRoot (fslog.c:3489) and UpdateRecordDataAllocation (fslog.c:3697) cases, the memmove destination is `Add2Ptr(e, le16_to_cpu(e->view.data_off))`, where e->view.data_off comes from an on-disk NTFS_DE inside an INDEX_ROOT or INDEX_BUFFER. Neither case validates view.data_off + dlen against e->size; the…

27. Jul 2026

Ausgewertete Quellen

• Ubuntu
  USN-9066-1: Linux kernel (HWE) vulnerabilities
• CERT-Bund
  WID-SEC-2026-2527
• NVD
  CVE-2026-64532