Cloudanix VulnDB

CVE-2026-80868

None

CVSS

—

EPSS

0.2%

Published

Sep 4, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A bug in how Linux handles certain file data on NTFS drives could cause the system to crash unexpectedly during normal file operations.

Exploitation
Local Privilege
Attacker needs
Low Privilege
Complexity
Moderate
Impact
Denial Of Service
Component
OS kernel
Class
Memory Corruption
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

The vulnerability stems from allocating inline data structures for NTFS3 iomap operations using kmemdup, which does not ensure page alignment, causing iomap_inline_data_valid checks to fail and potentially leading to memory corruption or kernel bugs during inline data writes.

Why it matters to the business

Linux systems handling NTFS file systems may experience unexpected crashes or data integrity issues during file operations, affecting system stability; low EPSS and no KEV listing indicate limited immediate risk but kernel updates remain necessary for long-term reliability.

How an attack unfolds

An attacker with local access could craft NTFS file operations involving inline data writes to trigger the alignment check failure, potentially causing denial of service via kernel panic; no known threat actors or ransomware campaigns have exploited this issue.

How to fix it

Update the Linux kernel to a version that includes the fix for proper page-aligned allocation using alloc_page in ntfs3 iomap handling.

How to confirm the fix worked

Verify the kernel source includes the change to use alloc_page for inline_data allocation and test iomap operations on NTFS volumes.

Typical attack path

  1. Gain local access to a Linux system with ntfs3 module loaded
  2. Perform file I/O operations on an NTFS volume that trigger inline data handling
  3. Exploit the misalignment to cause check failure and system instability

How to detect it

Review kernel logs for BUG reports related to iomap_write_end_inline or inline data alignment failures.

What your security team should do

  • Monitor for kernel updates addressing ntfs3 iomap issues
  • Apply patches promptly to maintain system stability
  • Test NTFS file system operations post-update

The record

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Allocate iomap inline_data using alloc_page This fixes a BUG reported in iomap_write_end_inline: iomap_inline_data_valid checks that the inline_data fits within a page. If the inline_data is allocated with kmemdup there's no guarantee that it's page-aligned, so the check sometimes fails. Allocate it with alloc_page to ensure it's page-aligned.

Affected packages

Ecosystem Package Introduced Fixed