CVE-2026-99107unknown
ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize
Impact
In the Linux kernel, the following vulnerability has been resolved:
Source excerpt · LinuxAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Linux · Linux
Other versions: unaffected
| Version / range | Source status |
|---|---|
| fc053f05ca282a5e760b41f6560ac835c4e28037 to before 0a9122cada749447dfb6d67aa3fed4ee1982231c | affected |
| fc053f05ca282a5e760b41f6560ac835c4e28037 to before 8d139e3635c86e2c97c78d55538ce0b00b6d9986 | affected |
Linux · Linux
Other versions: affected
| Version / range | Source status |
|---|---|
| 7.1 | affected |
| 0 to before 7.1 | unaffected |
| 7.2.13 through 7.2.* (inclusive) | unaffected |
| 7.3 through * (inclusive) | unaffected |
Original source description
In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize
ntfs_new_attr_flags() passes the wrong MFT record to ntfs_attr_record_resize(). When the attribute is in an extent record, ctx->mrec points to the extent but the function receives the base record pointer m, causing incorrect size calculations in memmove.
Fix by passing ctx->mrec (the actual MFT record containing the attribute) instead of m (the base MFT record) to ntfs_attr_record_resize().