In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the free-cluster bitmap scan to the volume… (CVE-2026-89614)
A vulnerability in the Linux kernel's NTFS driver was resolved by bounding the free-cluster bitmap scan to the volume size. The issue involved an out-of-bounds scan when the $Bitmap covered more clusters than the volume, potentially causing a slab out-of-bounds read during file extension operations. The fix clamps the scan to the array size and rejects invalid logical cluster numbers (LCNs). Conforming volumes are not affected.
AI Analysis
Technical Summary
The Linux kernel NTFS driver had a vulnerability where the free-cluster bitmap scan could index beyond the allocated array due to a mismatch between the volume's cluster count and the $Bitmap size. This discrepancy allowed an out-of-bounds read reported by KASAN when extending a file on such a volume. The vulnerability was addressed by clamping the scan to the array size and rejecting decoded LCNs beyond the volume's cluster count, preventing out-of-bounds access.
Potential Impact
The vulnerability could lead to a slab out-of-bounds read in kernel memory when a file on a volume with a mismatched $Bitmap is extended. This may cause kernel instability or crashes but does not affect volumes that conform to expected specifications.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to clamp the free-cluster bitmap scan and reject invalid LCNs. Users should update to a kernel version that includes this fix. No additional mitigation is required for conforming volumes.
In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the free-cluster bitmap scan to the volume… (CVE-2026-89614)
Description
A vulnerability in the Linux kernel's NTFS driver was resolved by bounding the free-cluster bitmap scan to the volume size. The issue involved an out-of-bounds scan when the $Bitmap covered more clusters than the volume, potentially causing a slab out-of-bounds read during file extension operations. The fix clamps the scan to the array size and rejects invalid logical cluster numbers (LCNs). Conforming volumes are not affected.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel NTFS driver had a vulnerability where the free-cluster bitmap scan could index beyond the allocated array due to a mismatch between the volume's cluster count and the $Bitmap size. This discrepancy allowed an out-of-bounds read reported by KASAN when extending a file on such a volume. The vulnerability was addressed by clamping the scan to the array size and rejecting decoded LCNs beyond the volume's cluster count, preventing out-of-bounds access.
Potential Impact
The vulnerability could lead to a slab out-of-bounds read in kernel memory when a file on a volume with a mismatched $Bitmap is extended. This may cause kernel instability or crashes but does not affect volumes that conform to expected specifications.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to clamp the free-cluster bitmap scan and reject invalid LCNs. Users should update to a kernel version that includes this fix. No additional mitigation is required for conforming volumes.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-xgpr-mx9q-9vxw
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89614"]
Threat ID: 6aa4a00655bf5e2cf5a86645
Added to database: 09/12/2026, 00:42:46 UTC
Last enriched: 09/12/2026, 00:59:37 UTC
Last updated: 09/12/2026, 01:59:46 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.