vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-80598

ntfs3: fix out-of-bounds read in decompress_lznt

HIGH
7.8
CVSS Score
Published: August 28, 2026 at 06:48 AM UTC
Updated: October 16, 2026 at 08:18 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read. Add index bounds checking to prevent the OOB access.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
5.15522e010b58379fbe19b38fdef5016bca0c3cf405
Vendor states this is fixed in 1113fa5b01a47a1a4cdbb9c695197ca6215f02a8 (fixed)
Vendor states this is fixed in 61415ffa365d2eca6986914afd0d1412444aa1dd (fixed)
Vendor states this is fixed in 7160a57192fb16d7a6fa9b7f5c7ac341d2444a89 (fixed)
Vendor states this is fixed in a93980141253c932aa6ae5d4422d90e0162dc774 (fixed)
Vendor states this is fixed in bd77afca2ae9b6d44d37902e3ad672ebb028b070 (fixed)
Vendor states this is fixed in c694f8ea2611e7413b3f04ee47e04a9b7b45817b (fixed)
Vendor states this is fixed in ff05a98150ebb2b03919a9c05c576681e86abbb7 (fixed)
Vendor states this is fixed in 5.15 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (7)

Source: cverecord
https://git.kernel.org/stable/c/1113fa5b01a47a1a4cdbb9c695197ca6215f02a8
Source: cverecord
https://git.kernel.org/stable/c/61415ffa365d2eca6986914afd0d1412444aa1dd
Source: cverecord
https://git.kernel.org/stable/c/bd77afca2ae9b6d44d37902e3ad672ebb028b070
Source: cverecord
https://git.kernel.org/stable/c/c694f8ea2611e7413b3f04ee47e04a9b7b45817b
Source: cverecord
https://git.kernel.org/stable/c/ff05a98150ebb2b03919a9c05c576681e86abbb7
Source: cverecord
https://git.kernel.org/stable/c/a93980141253c932aa6ae5d4422d90e0162dc774
Source: cverecord
https://git.kernel.org/stable/c/7160a57192fb16d7a6fa9b7f5c7ac341d2444a89

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card