Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden the validator A base inode's… (CVE-2026-80674)

CVE-2026-80674 is a high-severity vulnerability in the Linux kernel's NTFS filesystem driver. The vulnerability stems from the fact that resident attribute lists in NTFS inodes are copied without validation, unlike non-resident attribute lists which are sanity-checked. This lack of validation allows crafted attribute lists to reach code paths that trust the data as well-formed, resulting in out-of-bounds reads of kernel memory buffers. The fix involves factoring validation logic into a helper function that checks each attribute list entry's fixed header, length, and MFT reference validity. This validator is then used consistently on both resident and non-resident attribute lists, preventing malformed lists from causing memory safety issues.

The vulnerability can lead to out-of-bounds reads in kernel memory, potentially exposing sensitive information or causing kernel crashes. The CVSS score of 9.8 indicates critical impact with network attack vector, no privileges required, and full confidentiality, integrity, and availability impact. There are no known exploits in the wild at this time.

A fix is available that adds proper validation of resident attribute lists in the Linux kernel NTFS driver. Users should apply the official kernel updates that include this patch. Since this is a kernel vulnerability, updating to a patched kernel version is the recommended remediation. No additional mitigations are indicated by the vendor advisory.