Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CVE-2026-64432: Linux kernel NTFS driver can cause crash on mount
CVE-2026-64432 · published 2 months ago
Summary
The NTFS file‑system code in the Linux kernel could write beyond its memory limits when a specially crafted NTFS image is mounted, potentially leading to a system crash. This issue has been fixed in recent updates for the listed Ubuntu kernel packages. Apply the latest security updates for those kernels as soon as possible.
What to do
- Update debian linux to version 6.1.180-1.
- Update debian linux to version 6.12.96-1.
- Update debian linux to version 7.1.4-1.
- Update debian linux-6.1 to version 6.1.180-1~deb11u1.
- Update debian rootio-linux to version 6.1.177-1.aikido.162.
- Update canonical rootio-linux to version 5.15.0-186.196.aikido.106.
- Update canonical rootio-linux to version 5.15.0-186.196.aikido.107.
- Update canonical rootio-linux to version 5.15.0-186.196.aikido.108.
- Update canonical linux-aws-7.0 to version 7.0.0-1012.12~24.04.1.
- Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-hwe-7.0 to version 7.0.0-31.31~24.04.1.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1018.18~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-31.31.1~24.04.1.
- Update canonical linux to version 7.0.0-31.31.
- Update canonical linux-aws to version 7.0.0-1012.12.
- Update canonical linux-azure to version 7.0.0-1014.14.
- Update canonical linux-gcp to version 7.0.0-1011.11.
- Update canonical linux-gke to version 7.0.0-1006.7.
- Update canonical linux-ibm to version 7.0.0-1013.13.
- Update canonical linux-nvidia to version 7.0.0-1018.18.
- Update canonical linux-nvidia-bos to version 7.0.0-2018.18.
- Update canonical linux-oem-7.0 to version 7.0.0-1013.13.
- Update canonical linux-oracle to version 7.0.0-1011.11.
- Update canonical linux-raspi to version 7.0.0-1019.19.
- Update canonical linux-realtime to version 7.0.0-31.31.1.
- Update canonical linux-riscv to version 7.0.0-31.31.1.
- Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
- Update debian linux-6.12 to version 6.12.100-1~deb12u1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update canonical linux-aws-5.15 to version 5.15.0-1117.124~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1123.132~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1122.131~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1118.128~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-198.208~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1111.115~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1112.118~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-195.205~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1114.120~20.04.1.
- Update canonical linux to version 5.15.0-198.208.
- Update canonical linux-aws to version 5.15.0-1117.124.
- Update canonical linux-azure to version 5.15.0-1123.132.
- Update canonical linux-azure-fde to version 5.15.0-1122.131.
- Update canonical linux-gcp to version 5.15.0-1118.128.
- Update canonical linux-gke to version 5.15.0-1113.119.
- Update canonical linux-gkeop to version 5.15.0-1100.108.
- Update canonical linux-ibm to version 5.15.0-1111.115.
- Update canonical linux-intel-iotg to version 5.15.0-1112.118.
- Update canonical linux-kvm to version 5.15.0-1109.114.
- Update canonical linux-lowlatency to version 5.15.0-195.205.
- Update canonical linux-nvidia to version 5.15.0-1112.113.
- Update canonical linux-oracle to version 5.15.0-1114.120.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1080.84.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1109.111.
- Update canonical linux-realtime to version 5.15.0-1116.125.
- Update canonical linux-aws-fips to version 5.15.0-1117.124+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1123.132+fips1.
- Update canonical linux-fips to version 5.15.0-198.208+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1118.128+fips1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1036.39.
- Update linux linux to version 964c3fae1dfc49dde5468eace940f199cda234e9 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1117.124~20.04.1 Fix: upgrade to 5.15.0-1117.124~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1123.132~20.04.1 Fix: upgrade to 5.15.0-1123.132~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1122.131~20.04.1 Fix: upgrade to 5.15.0-1122.131~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1118.128~20.04.1 Fix: upgrade to 5.15.0-1118.128~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-198.208~20.04.1 Fix: upgrade to 5.15.0-198.208~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1111.115~20.04.1 Fix: upgrade to 5.15.0-1111.115~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1112.118~20.04.1 Fix: upgrade to 5.15.0-1112.118~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-195.205~20.04.1 Fix: upgrade to 5.15.0-195.205~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1114.120~20.04.1 Fix: upgrade to 5.15.0-1114.120~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
Showing 50 of 190. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-198.208 Fix: upgrade to 5.15.0-198.208
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1117.124 Fix: upgrade to 5.15.0-1117.124
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1111.115 Fix: upgrade to 5.15.0-1111.115
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1112.118 Fix: upgrade to 5.15.0-1112.118
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1109.114 Fix: upgrade to 5.15.0-1109.114
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-195.205 Fix: upgrade to 5.15.0-195.205
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1112.113 Fix: upgrade to 5.15.0-1112.113
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1114.120 Fix: upgrade to 5.15.0-1114.120
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1080.84 Fix: upgrade to 5.15.0-1080.84
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-7.0 |
< 7.0.0-1012.12~24.04.1 Fix: upgrade to 7.0.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-31.31~24.04.1 Fix: upgrade to 7.0.0-31.31~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1018.18~24.04.1 Fix: upgrade to 7.0.0-1018.18~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-31.31.1~24.04.1 Fix: upgrade to 7.0.0-31.31.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2018.18 Fix: upgrade to 7.0.0-2018.18
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| – | linux | linux |
< 964c3fae1dfc49dde5468eace940f199cda234e9 5.15 |
| Debian:12 | debian | linux |
< 6.1.180-1 Fix: upgrade to 6.1.180-1
|
| Debian:13 | debian | linux |
< 6.12.96-1 Fix: upgrade to 6.12.96-1
|
| Debian:14 | debian | linux |
< 7.1.4-1 Fix: upgrade to 7.1.4-1
|
| Debian:11 | debian | linux-6.1 |
< 6.1.180-1~deb11u1 Fix: upgrade to 6.1.180-1~deb11u1
|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.177-1.aikido.162 Fix: upgrade to 6.1.177-1.aikido.162
|
| Root:Ubuntu:22.04 | canonical | rootio-linux |
< 5.15.0-186.196.aikido.106 < 5.15.0-186.196.aikido.107 < 5.15.0-186.196.aikido.108 Fix: upgrade to 5.15.0-186.196.aikido.106
|
| – | linux | linux_kernel |
>= 5.15, < 5.15.212 >= 5.16, < 6.1.178 >= 6.2, < 6.6.145 >= 6.7, < 6.12.96 >= 6.13, < 6.18.39 >= 6.19, < 7.1.4 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-31.31 Fix: upgrade to 7.0.0-31.31
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1012.12 Fix: upgrade to 7.0.0-1012.12
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1006.7 Fix: upgrade to 7.0.0-1006.7
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1018.18 Fix: upgrade to 7.0.0-1018.18
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1019.19 Fix: upgrade to 7.0.0-1019.19
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Debian:12 | debian | linux-6.12 |
< 6.12.100-1~deb12u1 Fix: upgrade to 6.12.100-1~deb12u1
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1123.132 Fix: upgrade to 5.15.0-1123.132
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1122.131 Fix: upgrade to 5.15.0-1122.131
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1118.128 Fix: upgrade to 5.15.0-1118.128
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1113.119 Fix: upgrade to 5.15.0-1113.119
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1100.108 Fix: upgrade to 5.15.0-1100.108
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1109.111 Fix: upgrade to 5.15.0-1109.111
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1116.125 Fix: upgrade to 5.15.0-1116.125
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1117.124+fips1 Fix: upgrade to 5.15.0-1117.124+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1123.132+fips1 Fix: upgrade to 5.15.0-1123.132+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-198.208+fips1 Fix: upgrade to 5.15.0-198.208+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1118.128+fips1 Fix: upgrade to 5.15.0-1118.128+fips1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1036.39 Fix: upgrade to 6.8.0-1036.39
|
Original advisory text
CVE-2026-64432 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns In the analysis pass of $LogFile journal replay, log_replay() copies LCNs from each action log record into an existing Dirty Page Table (DPT) entry without bounding the destination index. A crafted NTFS image with DPT entry lcns_follow=1 and an action log record with lcns_follow=2 produces a kernel slab out-of-bounds write at mount time: BUG: KASAN: slab-out-of-bounds in log_replay+0x654c/0xdb60 Write of size 8 at addr ffff8880095e1040 by task mount Two attacker-controlled fields can drive j+i past the allocated page_lcns[] array: 1. dp->lcns_follow (capacity) can be smaller than lrh->lcns_follow. 2. lrh->target_vcn may be smaller than dp->vcn, making the u64 subtraction wrap to a huge size_t. Validate target VCN delta and per-record LCN count against the DPT entry capacity, bail via the existing out: cleanup label with -EINVAL. This mirrors the bounds-check pattern added in commit b2bc7c44ed17 ("fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot") and commit 0ca0485e4b2e ("fs/ntfs3: validate rec->used in journal-replay file record check").
References
- https://security-tracker.debian.org/tracker/CVE-2026-64432 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-64432 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-64432 Third Party Advisory
- https://git.kernel.org/linus/57382ec6ac63b63dce2789e835fded28b698ae79 Third Party Advisory
- https://git.kernel.org/stable/c/3aa96956ca2200674e2a8f9c23ec6ecd45e5010f Third Party Advisory
- https://git.kernel.org/stable/c/57382ec6ac63b63dce2789e835fded28b698ae79 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8876-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8878-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8879-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8877-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8875-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8886-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8875-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8727-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-2 Vendor Advisory
- https://git.kernel.org/stable/c/946046841013ebac8492ef49651c53638d7a9a6a Third Party Advisory
- https://git.kernel.org/stable/c/964c3fae1dfc49dde5468eace940f199cda234e9 Third Party Advisory
- https://git.kernel.org/stable/c/c6f9e804f73ef809529865fbc7256dd189ff8c33 Third Party Advisory
- https://git.kernel.org/stable/c/cf28fc1658463d768657cf1c27a83980d4ba7ef2 Third Party Advisory
- https://git.kernel.org/stable/c/f433acc85b86f327d03ba8b03a33c105c51053de Third Party Advisory
- https://ubuntu.com/security/notices/USN-8726-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8800-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
9.1
Critical
Type
CWE-787Out-of-bounds Write
Timeline
Published25 Jul 2026
Updated9 Oct 2026
First seen25 Jul 2026
Sources
CVE-2026-64432 · NVD
CVE-2026-64432 · MITRE
DEBIAN-CVE-2026-64432 · OSV
UBUNTU-CVE-2026-64432 · OSV
Track software like this
Free during beta