CVE-2026-80598 — ntfs3: fix out-of-bounds read in decompress_lznt
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not validate array index bounds bef…
Published: 2026-08-28 · CVSS: 7.8 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read. Add index bounds checking to prevent the OOB access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7