CVE-2026-89613

CVE-2026-89613

Critical · published September 12, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ntfs: reject invalid empty mapping pairs

Reject an attribute with empty mapping pairs if it has inconsistent

highest VCN and size.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.1th percentile
Published
2026-09-12T00:19Z
References (2)
https://git.kernel.org/stable/c/766062a82e1ce4087c7dc077224144dfd34b3661 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b0cc6dbc655e037251874b3e0dd1a760dcf29007 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 13 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 11 SEP 19:45Z
    ntfs: reject invalid empty mapping pairs
    cvelistv5