7.8

CVE-2026-80598

ntfs3: fix out-of-bounds read in decompress_lznt

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: fix out-of-bounds read in decompress_lznt

decompress_lznt() does not validate array index bounds before accessing
the decompression table. A corrupted NTFS3 image with invalid compressed
data can trigger an out-of-bounds read.

Add index bounds checking to prevent the OOB access.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 522e010b58379fbe19b38fdef5016bca0c3cf405
Version < 1113fa5b01a47a1a4cdbb9c695197ca6215f02a8
Status affected
Version 522e010b58379fbe19b38fdef5016bca0c3cf405
Version < 61415ffa365d2eca6986914afd0d1412444aa1dd
Status affected
Version 522e010b58379fbe19b38fdef5016bca0c3cf405
Version < bd77afca2ae9b6d44d37902e3ad672ebb028b070
Status affected
Version 522e010b58379fbe19b38fdef5016bca0c3cf405
Version < c694f8ea2611e7413b3f04ee47e04a9b7b45817b
Status affected
Version 522e010b58379fbe19b38fdef5016bca0c3cf405
Version < ff05a98150ebb2b03919a9c05c576681e86abbb7
Status affected
Version 522e010b58379fbe19b38fdef5016bca0c3cf405
Version < a93980141253c932aa6ae5d4422d90e0162dc774
Status affected
Version 522e010b58379fbe19b38fdef5016bca0c3cf405
Version < 7160a57192fb16d7a6fa9b7f5c7ac341d2444a89
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.028
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/1113fa5b01a47a1a4cdbb9c695197ca6215f02a8
https://git.kernel.org/stable/c/61415ffa365d2eca6986914afd0d1412444aa1dd
https://git.kernel.org/stable/c/bd77afca2ae9b6d44d37902e3ad672ebb028b070
https://git.kernel.org/stable/c/c694f8ea2611e7413b3f04ee47e04a9b7b45817b
https://git.kernel.org/stable/c/ff05a98150ebb2b03919a9c05c576681e86abbb7
https://git.kernel.org/stable/c/a93980141253c932aa6ae5d4422d90e0162dc774
https://git.kernel.org/stable/c/7160a57192fb16d7a6fa9b7f5c7ac341d2444a89