CVE-2026-80598 PUBLISHED

ntfs3: fix out-of-bounds read in decompress_lznt

Assigner: Linux
Reserved: 26.08.2026 Published: 28.08.2026 Updated: 28.08.2026

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: fix out-of-bounds read in decompress_lznt

decompress_lznt() does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read.

Add index bounds checking to prevent the OOB access.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 1113fa5b01a47a1a4cdbb9c695197ca6215f02a8 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 61415ffa365d2eca6986914afd0d1412444aa1dd (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to bd77afca2ae9b6d44d37902e3ad672ebb028b070 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to c694f8ea2611e7413b3f04ee47e04a9b7b45817b (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to ff05a98150ebb2b03919a9c05c576681e86abbb7 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to a93980141253c932aa6ae5d4422d90e0162dc774 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 7160a57192fb16d7a6fa9b7f5c7ac341d2444a89 (excl.)
  • affected from 0 to 5.15.212 (excl.)
  • affected from 0 to 6.1.178 (excl.)
  • affected from 0 to 6.6.145 (excl.)
  • affected from 0 to 6.12.97 (excl.)
  • affected from 0 to 6.18.40 (excl.)
  • affected from 0 to 7.1.5 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • unaffected from 5.15.212 to 5.15.* (incl.)
  • unaffected from 6.1.178 to 6.1.* (incl.)
  • unaffected from 6.6.145 to 6.6.* (incl.)
  • unaffected from 6.12.97 to 6.12.* (incl.)
  • unaffected from 6.18.40 to 6.18.* (incl.)
  • unaffected from 7.1.5 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References