Threats tagged 'ghsa-rmc3-723g-fx4m'

CVE-2026-90048 is a critical vulnerability in the Linux kernel's NTFS3 filesystem driver. It involves a slab-out-of-bounds write in the function ni_create_attr_list(), which improperly sizes a buffer when processing attributes of the primary MFT record. This can be triggered by mounting a crafted NTFS image and performing operations such as setting extended attributes on files. The flaw allows writing beyond allocated heap memory, potentially leading to kernel memory corruption.