Live › vulnerability › CVE-2026-98880
Go to dashboardIn the Linux kernel's ntfs3 driver, a failed set_blocksize call is not handled, so mounting an NTFS volume with a block size larger than the page size hits a kernel BUG_ON. The sources describe a kernel crash on mount rather than any data access or code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems that mount NTFS volumes using the Linux kernel ntfs3 driver are potentially affected, since the crash happens during mount. Systems that do not use ntfs3 (no NTFS mounts, or using another driver such as ntfs-3g through FUSE) are unlikely to be affected. The sources do not state which block sizes or volume types trigger the bug.
No product ranges from the sources yet.
uname -r to see the running kernel version and compare it with the fixed release in the NVD entrylsmod | grep ntfs3 to check whether the ntfs3 driver is loadedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: handle set_blocksize failures
ntfs3 uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the
BUG_ON(offset >= folio_size(folio));
in folio_set_bh on the first __bread_gfp call.
This page as .md · .json · in your agent: get_signal("CVE-2026-98880")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.