Answer in brief
CVE-2026-46062 records a Unknown severity vulnerability in ntfs3: fix integer overflow in run_unpack() volume boundary check. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-46062 records a Unknown severity vulnerability in ntfs3: fix integer overflow in run_unpack() volume boundary check. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=82cae269cfa953032fbb8980a7d554d60fb00b17 <424858f9a048057bb8f834bfe03d18f5e477e747 || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <e73cd5aed6b15e55c1c47577bdb473b5e88d6a69 || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <a954061b334ec67c79ae9d0cadd83fa521396487 || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <60dab3e2931f3d792438a77a6cb0cb731c43300b || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <f1af27cec07a9fd0847166bdb23c99e86b05bfdc || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <6175d09c23bec4b60860ee9a0170308ff4b56e10 || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <984a415f019536ea2d24de9010744e5302a9a948 | 424858f9a048057bb8f834bfe03d18f5e477e747, e73cd5aed6b15e55c1c47577bdb473b5e88d6a69, a954061b334ec67c79ae9d0cadd83fa521396487, 60dab3e2931f3d792438a77a6cb0cb731c43300b, f1af27cec07a9fd0847166bdb23c99e86b05bfdc, 6175d09c23bec4b60860ee9a0170308ff4b56e10, 984a415f019536ea2d24de9010744e5302a9a948 |
| Linux/Linuxgeneric | 5.15 | Not reported |
Published upstream
May 27, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix integer overflow in run_unpack() volume boundary check The volume boundary check `lcn + len > sbi->used.bitmap.nbits` uses raw addition which can wrap around for large lcn and len values, bypassing the validation. Use check_add_overflow() as is already done for the adjacent prev_lcn + dlcn and vcn64 + len checks added by commit 3ac37e100385 ("ntfs3: Fix integer overflow in run_unpack()"). Found by fuzzing with a source-patched harness (LibAFL + QEMU).
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=82cae269cfa953032fbb8980a7d554d60fb00b17 <424858f9a048057bb8f834bfe03d18f5e477e747 || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <e73cd5aed6b15e55c1c47577bdb473b5e88d6a69 || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <a954061b334ec67c79ae9d0cadd83fa521396487 || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <60dab3e2931f3d792438a77a6cb0cb731c43300b || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <f1af27cec07a9fd0847166bdb23c99e86b05bfdc || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <6175d09c23bec4b60860ee9a0170308ff4b56e10 || >=82cae269cfa953032fbb8980a7d554d60fb00b17 <984a415f019536ea2d24de9010744e5302a9a948 | 424858f9a048057bb8f834bfe03d18f5e477e747, e73cd5aed6b15e55c1c47577bdb473b5e88d6a69, a954061b334ec67c79ae9d0cadd83fa521396487, 60dab3e2931f3d792438a77a6cb0cb731c43300b, f1af27cec07a9fd0847166bdb23c99e86b05bfdc, 6175d09c23bec4b60860ee9a0170308ff4b56e10, 984a415f019536ea2d24de9010744e5302a9a948 |
| Linux/Linuxgeneric | 5.15 | Not reported |
Published upstream
May 27, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix integer overflow in run_unpack() volume boundary check The volume boundary check `lcn + len > sbi->used.bitmap.nbits` uses raw addition which can wrap around for large lcn and len values, bypassing the validation. Use check_add_overflow() as is already done for the adjacent prev_lcn + dlcn and vcn64 + len checks added by commit 3ac37e100385 ("ntfs3: Fix integer overflow in run_unpack()"). Found by fuzzing with a source-patched harness (LibAFL + QEMU).
Quoted source text, attributed separately from HOL analysis.