CVE-2026-80868

CVE-2026-80868

published September 4, 2026

CVSS
—
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Allocate iomap inline_data using alloc_page

This fixes a BUG reported in iomap_write_end_inline:

iomap_inline_data_valid checks that the inline_data fits within

a page. If the inline_data is allocated with kmemdup there's no

guarantee that it's page-aligned, so the check sometimes fails.

Allocate it with alloc_page to ensure it's page-aligned.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.0th percentile
Published
2026-09-04T21:16Z
References (2)
EPSS history
Timeline
  • 06 SEP 03:33Z
    EPSS moved — → 0%
    epss
  • 04 SEP 16:48Z
    ntfs3: Allocate iomap inline_data using alloc_page
    cvelistv5