Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()… (CVE-2026-80673)

The Linux kernel's NTFS driver function ntfs_external_attr_find improperly bounds a look-ahead attribute-list entry when resolving attribute lookups with a non-zero lowest_vcn. The function only partially validates the next $ATTRIBUTE_LIST entry, allowing an attacker-controlled, non-8-aligned length to cause reads beyond the allocated attribute-list buffer. This results in a slab out-of-bounds read when the inode is read. The fix adds validation of the look-ahead entry using ntfs_attr_list_entry_is_valid before accessing its lowest_vcn and name fields, ensuring proper bounds checking consistent with the main attribute-list walk.

This vulnerability can lead to a high-severity out-of-bounds read in kernel memory, potentially causing information disclosure, system instability, or denial of service. The CVSS score of 9.8 indicates critical impact on confidentiality, integrity, and availability without requiring privileges or user interaction.

A fix has been implemented that validates the look-ahead attribute-list entry before dereferencing it, preventing out-of-bounds reads. Users should apply the official Linux kernel updates that include this patch to resolve the vulnerability. Since this is not a cloud service, remediation depends on applying the kernel update provided by the Linux distribution or vendor.