CVE-2026-80868

Source
https://cve.org/CVERecord?id=CVE-2026-80868
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80868.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-80868
Downstream
Published
2026-09-04T16:48:23Z
Modified
2026-09-06T03:46:59Z
Summary
ntfs3: Allocate iomap inline_data using alloc_page
Details

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Allocate iomap inline_data using alloc_page

This fixes a BUG reported in iomap_write_end_inline: iomap_inline_data_valid checks that the inline_data fits within a page. If the inline_data is allocated with kmemdup there's no guarantee that it's page-aligned, so the check sometimes fails. Allocate it with alloc_page to ensure it's page-aligned.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80868.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
099ef9ab9203dff327f2d61e44773f9acbc01f13
Fixed
3cd2212012c06d2b1fd03a6bf84f6202ab70056c
Fixed
70d3855594cf6e8791970714b65cac3202d6160e

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80868.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
7.0.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80868.json"