https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:00:07 +0000 https://vulnerability.circl.lu/vuln/cve-2026-46062 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ntfs3: fix integer overflow in run_unpack() volume boundary check</p> <p>The volume boundary check `lcn + len &gt; sbi-&gt;used.bitmap.nbits` uses raw addition which can wrap around for large lcn and len values, bypassing the validation. Use check_add_overflow() as is already done for the adjacent prev_lcn + dlcn and vcn64 + len checks added by commit 3ac37e100385 (&#34;ntfs3: Fix integer overflow in run_unpack()&#34;).</p> <p>Found by fuzzing with a source-patched harness (LibAFL + QEMU).</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ntfs3: fix integer overflow in run_unpack() volume boundary check</p> <p>The volume boundary check `lcn + len &gt; sbi-&gt;used.bitmap.nbits` uses raw addition which can wrap around for large lcn and len values, bypassing the validation. Use check_add_overflow() as is already done for the adjacent prev_lcn + dlcn and vcn64 + len checks added by commit 3ac37e100385 (&#34;ntfs3: Fix integer overflow in run_unpack()&#34;).</p> <p>Found by fuzzing with a source-patched harness (LibAFL + QEMU).</p> https://vulnerability.circl.lu/vuln/cve-2026-46062