CVE-2026-80868 PUBLISHED

ntfs3: Allocate iomap inline_data using alloc_page

Assigner: Linux
Reserved: 26.08.2026 Published: 04.09.2026 Updated: 04.09.2026

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Allocate iomap inline_data using alloc_page

This fixes a BUG reported in iomap_write_end_inline: iomap_inline_data_valid checks that the inline_data fits within a page. If the inline_data is allocated with kmemdup there's no guarantee that it's page-aligned, so the check sometimes fails. Allocate it with alloc_page to ensure it's page-aligned.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 099ef9ab9203dff327f2d61e44773f9acbc01f13 to 3cd2212012c06d2b1fd03a6bf84f6202ab70056c (excl.)
  • affected from 099ef9ab9203dff327f2d61e44773f9acbc01f13 to 70d3855594cf6e8791970714b65cac3202d6160e (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 7.0 is affected
  • unaffected from 0 to 7.0 (excl.)
  • unaffected from 7.1.5 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References