Disclosure summary
In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectors_per_cluster in the boot sector is_boot_sector_ntfs() checks the boot sector's sectors_per_cluster field with a range test that rejects 0x81..0xf3 but accepts 0 and other non-power-of-two counts. A zero value reaches parse_ntfs_boot_sector(): sectors_per_cluster_bits = ffs(sectors_per_cluster) - 1; ... vol->cluster_size = vol->sector_size
Source-reported weakness categories
NVD-CWE-noinfo
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2026-98135
Open original source · Updated Oct 08, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| linux | linux_kernel | * {"versionStartIncluding":"7.1","versionEndExcluding":"7.2.7"} |
| linux | linux_kernel | 7.3 |
Original records & references
- NIST NVD record
- CVE Program record
- git.kernel.org — Patch
- git.kernel.org — Patch
PUBLISHED 2026-09-25T07:17:44-04:00
MODIFIED 2026-10-08T14:11:39-04:00
INGESTED 2026-10-10T20:50:44-04:00