CVE-2026-89613 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

ntfs: reject invalid empty mapping pairs

Reject an attribute with empty mapping pairs if it has inconsistent
highest VCN and size.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/766062a82e1ce4087c7dc077224144dfd34b3661
https://git.kernel.org/stable/c/b0cc6dbc655e037251874b3e0dd1a760dcf29007

History

Fri, 11 Sep 2026 23:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inconsistent highest VCN and size.
Title		ntfs: reject invalid empty mapping pairs
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/766062a82e1ce4087c7dc077224144dfd34b3661 https://git.kernel.org/stable/c/b0cc6dbc655e037251874b3e0dd1a760dcf29007

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-11T19:45:14.081Z

Updated: 2026-09-11T19:45:14.081Z

Reserved: 2026-09-11T19:38:34.735Z

Link: CVE-2026-89613

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-11T20:19:46.433

Modified: 2026-09-11T20:19:46.433

Link: CVE-2026-89613

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89613", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.735Z", "datePublished": "2026-09-11T19:45:14.081Z", "dateUpdated": "2026-09-11T19:45:14.081Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-11T19:45:14.081Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs: reject invalid empty mapping pairs\n\nReject an attribute with empty mapping pairs if it has inconsistent\nhighest VCN and size."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ntfs/runlist.c"], "versions": [{"version": "11ccc9107dc460de28af90fac1f42404d9802735", "lessThan": "b0cc6dbc655e037251874b3e0dd1a760dcf29007", "status": "affected", "versionType": "git"}, {"version": "11ccc9107dc460de28af90fac1f42404d9802735", "lessThan": "766062a82e1ce4087c7dc077224144dfd34b3661", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ntfs/runlist.c"], "versions": [{"version": "7.1", "status": "affected"}, {"version": "0", "lessThan": "7.1", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.1", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.1", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/b0cc6dbc655e037251874b3e0dd1a760dcf29007"}, {"url": "https://git.kernel.org/stable/c/766062a82e1ce4087c7dc077224144dfd34b3661"}], "title": "ntfs: reject invalid empty mapping pairs", "x_generator": {"engine": "bippy-1.2.0"}}}}