Answer in brief
CVE-2026-53027 records a Medium severity (CVSS 5.5) vulnerability in fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=406a037d93b769bca248476bd14bbe548dc1ec35 <543093f65318d012850e548b241f85381b14d643 || >=c380b52f6c5702cc4bdda5e6d456d6c19a201a0b <ea59d9dbc5504e29d420ac4aab774cbce39b0e69 || >=c380b52f6c5702cc4bdda5e6d456d6c19a201a0b <d68a14450783ecc5fddae957ac4e1c546dfcfb73 || >=c380b52f6c5702cc4bdda5e6d456d6c19a201a0b <08fad5d5a26cc55c0ecb68ac59ba3be5e31f4147 || >=c380b52f6c5702cc4bdda5e6d456d6c19a201a0b <2b4ae1ce613ade8a7e118fba4a5a77cd23e97e54 || >=c380b52f6c5702cc4bdda5e6d456d6c19a201a0b <d7ea8495fd307b58f8867acd81a1b40075b1d3ba || >=6.1.132 <6.1.191 | 543093f65318d012850e548b241f85381b14d643, ea59d9dbc5504e29d420ac4aab774cbce39b0e69, d68a14450783ecc5fddae957ac4e1c546dfcfb73, 08fad5d5a26cc55c0ecb68ac59ba3be5e31f4147, 2b4ae1ce613ade8a7e118fba4a5a77cd23e97e54, d7ea8495fd307b58f8867acd81a1b40075b1d3ba, 6.1.191 |
| Linux/Linuxgeneric | 6.2 | Not reported |
Published upstream
Jun 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 30, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jun 24, 2026
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this case, vcn and vcn0 may reside in different attribute segments. The code already handles the case where vcn is in a different segment by loading its runs before allocation. However, it fails to load runs for vcn0 when vcn0 resides in a different segment than vcn. This causes run_lookup_entry() to return SPARSE_LCN for vcn0 since its segment was never loaded into the in-memory run list, triggering the WARN_ON(1). Fix this by adding a missing check for vcn0 after the existing vcn segment check. If vcn0 falls outside the current segment range [svcn, evcn1), find and load the attribute segment containing vcn0 before performing the run lookup. The following scenario triggers the bug: attr_data_get_block_locked() vcn = vcn0 & cmask <- vcn != vcn0 after frame alignment load runs for vcn segment <- vcn0 segment not loaded! attr_allocate_clusters() <- allocation succeeds run_lookup_entry(vcn0) <- vcn0 not in run -> SPARSE_LCN WARN_ON(1) <- bug fires here!
Quoted source text, attributed separately from HOL analysis.