CVE-2026-80868
Received Received - Intake

Memory Corruption in Linux Kernel NTFS3 Driver

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Allocate iomap inline_data using alloc_page This fixes a BUG reported in iomap_write_end_inline: iomap_inline_data_valid checks that the inline_data fits within a page. If the inline_data is allocated with kmemdup there's no guarantee that it's page-aligned, so the check sometimes fails. Allocate it with alloc_page to ensure it's page-aligned.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80868
EUVD
EUVD-2026-71498

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a bug in the NTFS3 file system driver. The issue occurs in the iomap_write_end_inline function where inline data is not guaranteed to be page-aligned when allocated with kmemdup. This can cause the iomap_inline_data_valid check to fail because it expects the inline data to fit within a page boundary. The fix allocates the inline data using alloc_page to ensure proper alignment.

Detection Guidance

This vulnerability is specific to the Linux kernel's NTFS3 driver and does not have a direct network detection method. To check if your system is affected, verify the kernel version and NTFS3 driver implementation. Use commands like 'uname -a' to check the kernel version and 'modinfo ntfs3' to inspect the NTFS3 module.

Impact Analysis

This vulnerability may lead to filesystem corruption or crashes when writing inline data in NTFS3 partitions. Users relying on NTFS3 for storage could experience data loss or system instability if the bug is triggered during file operations.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor your kernel release notes or distribution updates for patches addressing this issue. No additional commands are required beyond standard kernel update procedures.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80868. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart