CVE-2026-89613

EUVD-2026-76525
In the Linux kernel, the following vulnerability has been resolved:

ntfs: reject invalid empty mapping pairs

Reject an attribute with empty mapping pairs if it has inconsistent
highest VCN and size.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 9.68%
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.176-1
fixed
bookworm (security)
6.1.187-1
fixed
forky
vulnerable
sid
vulnerable
trixie
6.12.107-1
fixed
trixie (security)
6.12.107-1
fixed
References
https://git.kernel.org/stable/c/766062a82e1ce4087c7dc077224144dfd34b3661
https://git.kernel.org/stable/c/b0cc6dbc655e037251874b3e0dd1a760dcf29007