BaselineWatch
Desk

CVE-2026-99107

unscored Published

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize ntfs_new_attr_flags() passes the wrong MFT record to ntfs_attr_record_resize(). When the attribute is in an extent record, ctx->mrec points to the extent but the function receives the base record pointer m, causing incorrect size calculations in memmove. Fix by passing ctx->mrec (the actual MFT record containing the attribute) instead of m (the base MFT record) to ntfs_attr_record_resize().

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 3

  1. StatusReceived → PublishedNVD modified 2026-10-28 10:34
  2. StatusPublished → ReceivedNVD modified 2026-10-28 11:17
  3. First seenunscored · linuxNVD modified 2026-10-28 10:34

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 2