Dashboard / CVE-2026-99107

CVE-2026-99107

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-10-28 Modified: 2026-10-31 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize ntfs_new_attr_flags() passes the wrong MFT record to ntfs_attr_record_resize(). When the attribute is in an extent record, ctx->mrec points to the extent but the function receives the base record pointer m, causing incorrect size calculations in memmove. Fix by passing ctx->mrec (the actual MFT record containing the attribute) instead of m (the base MFT record) to ntfs_attr_record_resize().

Affected Software (4)

VendorProductVersion
Linux Linux fc053f05ca282a5e760b41f6560ac835c4e28037 < 0a9122cada749447dfb6d67aa3fed4ee1982231c
Linux Linux fc053f05ca282a5e760b41f6560ac835c4e28037 < 0a9122cada749447dfb6d67aa3fed4ee1982231c
Linux Linux fc053f05ca282a5e760b41f6560ac835c4e28037 < 8d139e3635c86e2c97c78d55538ce0b00b6d9986
Linux Linux 7.1

References & Advisories (2)

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.12%
Raw Score 0.001210
Percentile 1.9%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00121
2026-10-31
0.00156
2026-10-30
0.00156
2026-10-29
0.00156

Intelligence Sources

mitre ref →
nvd ref →

External Links