In the Linux kernel, the following vulnerability has been resolved:

ntfs3: fix out-of-bounds read in decompress_lznt

decompress_lznt() does not validate array index bounds before accessing
the decompression table. A corrupted NTFS3 image with invalid compressed
data can trigger an out-of-bounds read.

Add index bounds checking to prevent the OOB access.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 1113fa5b01a47a1a4cdbb9c695197ca6215f02a8
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 61415ffa365d2eca6986914afd0d1412444aa1dd
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < bd77afca2ae9b6d44d37902e3ad672ebb028b070
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < c694f8ea2611e7413b3f04ee47e04a9b7b45817b
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < ff05a98150ebb2b03919a9c05c576681e86abbb7
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < a93980141253c932aa6ae5d4422d90e0162dc774
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 7160a57192fb16d7a6fa9b7f5c7ac341d2444a89
0 affected < 5.15.212
0 affected < 6.1.178
0 affected < 6.6.145
0 affected < 6.12.97
0 affected < 6.18.40
0 affected < 7.1.5
Linux Linux affected
Version Status Constraints
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1113fa5b01a47a1a4cdbb9c695197ca6215f02a8 cve-icon cve-icon
https://git.kernel.org/stable/c/61415ffa365d2eca6986914afd0d1412444aa1dd cve-icon cve-icon
https://git.kernel.org/stable/c/7160a57192fb16d7a6fa9b7f5c7ac341d2444a89 cve-icon cve-icon
https://git.kernel.org/stable/c/a93980141253c932aa6ae5d4422d90e0162dc774 cve-icon cve-icon
https://git.kernel.org/stable/c/bd77afca2ae9b6d44d37902e3ad672ebb028b070 cve-icon cve-icon
https://git.kernel.org/stable/c/c694f8ea2611e7413b3f04ee47e04a9b7b45817b cve-icon cve-icon
https://git.kernel.org/stable/c/ff05a98150ebb2b03919a9c05c576681e86abbb7 cve-icon cve-icon
History

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read. Add index bounds checking to prevent the OOB access.
Title ntfs3: fix out-of-bounds read in decompress_lznt
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:48:24.097Z

Reserved: 2026-08-26T14:34:25.771Z

Link: CVE-2026-80598

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T08:16:43.580

Modified: 2026-08-28T08:16:43.580

Link: CVE-2026-80598

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.