CVE-2026-80868 is a vulnerability in Linux Kernel
Published on September 4, 2026
ntfs3: Allocate iomap inline_data using alloc_page
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: Allocate iomap inline_data using alloc_page
This fixes a BUG reported in iomap_write_end_inline:
iomap_inline_data_valid checks that the inline_data fits within
a page. If the inline_data is allocated with kmemdup there's no
guarantee that it's page-aligned, so the check sometimes fails.
Allocate it with alloc_page to ensure it's page-aligned.
Products Associated with CVE-2026-80868
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 099ef9ab9203dff327f2d61e44773f9acbc01f13 and below 3cd2212012c06d2b1fd03a6bf84f6202ab70056c is affected.
- Version 099ef9ab9203dff327f2d61e44773f9acbc01f13 and below 70d3855594cf6e8791970714b65cac3202d6160e is affected.
- Version 7.0 is affected.
- Before 7.0 is unaffected.
- Version 7.1.5, <= 7.1.* is unaffected.
- Version 7.2, <= * is unaffected.