In the Linux kernel, the following vulnerability has been resolved: ntfs3: handle set_blocksize failures ntfs3 uses buffer_heads, which don't handle… (CVE-2026-98880)

The Linux kernel ntfs3 driver had a vulnerability where it did not properly handle failures in set_blocksize. The driver uses buffer_heads, which are incompatible with block sizes greater than PAGE_SIZE. This mismatch leads to a kernel BUG_ON triggered by an offset check in folio_set_bh during the first __bread_gfp call when mounting an NTFS filesystem. This issue has been resolved in the Linux kernel.

This vulnerability could cause a kernel crash (BUG_ON) when mounting NTFS filesystems using the ntfs3 driver under certain conditions involving block sizes larger than PAGE_SIZE. This results in denial of service due to kernel panic or system instability during mount operations.

A fix for this vulnerability has been implemented in the Linux kernel. Users should update to a kernel version that includes this fix to prevent the issue. Patch status is not explicitly confirmed in the provided data; therefore, verify the vendor advisory for the exact fixed kernel version and apply the update accordingly.