CVE-2026-80868ntfs3: Allocate iomap inline_data using alloc_page
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Allocate iomap inline_data using alloc_page This fixes a BUG reported in iomap_write_end_inline: iomap_inline_data_valid checks that the inline_data fits within a page. If the inline_data is allocated with kmemdup there's no guarantee that it's page-aligned, so the check sometimes fails. Allocate it with alloc_page to ensure it's page-aligned.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 4, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 099ef9ab9203dff327f2d61e44773f9acbc01f13 builds before 3cd2212012c06d2b1fd03a6bf84f6202ab70056c; 099ef9ab9203dff327f2d61e44773f9acbc01f13 builds before 70d3855594cf6e8791970714b65cac3202d6160e | CNA record |
References
- https://git.kernel.org/stable/c/3cd2212012c06d2b1fd03a6bf84f6202ab70056c
- https://git.kernel.org/stable/c/70d3855594cf6e8791970714b65cac3202d6160e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.