All vulnerabilities
CVE-2026-98880

Linux: ntfs3: handle set_blocksize failures

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in78e10082f3e919b8863958feac5f269d3ade9469Also 24f7d1824b7581ae3daf9d443c5dfeabd89df6d8, 6.6.158 and 2 moreCVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: handle set_blocksize failures

ntfs3 uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the

BUG_ON(offset >= folio_size(folio));

in folio_set_bh on the first __bread_gfp call.

Text from CVE List

Affected versions 11

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before df9dac4dbe557f6455a61e68cc09ef98b22f3686CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c5b8a7ec9a0a71518915c82b8552be1ccbb88288CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 78e10082f3e919b8863958feac5f269d3ade9469CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 24f7d1824b7581ae3daf9d443c5dfeabd89df6d8CVE List
  • Linuxaffected: all versions before 6.6.158CVE List
  • Linuxaffected: all versions before 6.12.111CVE List
  • Linuxaffected: all versions before 6.18.53CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 4