---
id: CVE-2026-98880
title: 'ntfs3: handle set_blocksize failures'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ntfs3: handle set_blocksize failures

  ntfs3 uses buffer_heads, which don't handle block size > PAGE_SIZE well.
  Without this, mounting we will hit the

          BUG_ON(of…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    df9dac4dbe557f6455a61e68cc09ef98b22f3686
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    c5b8a7ec9a0a71518915c82b8552be1ccbb88288
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    78e10082f3e919b8863958feac5f269d3ade9469
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    24f7d1824b7581ae3daf9d443c5dfeabd89df6d8
  - Linux < 6.6.158
  - Linux < 6.12.111
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T11:37:31.247Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98880'
references:
  - url: 'https://git.kernel.org/stable/c/df9dac4dbe557f6455a61e68cc09ef98b22f3686'
  - url: 'https://git.kernel.org/stable/c/c5b8a7ec9a0a71518915c82b8552be1ccbb88288'
  - url: 'https://git.kernel.org/stable/c/78e10082f3e919b8863958feac5f269d3ade9469'
  - url: 'https://git.kernel.org/stable/c/24f7d1824b7581ae3daf9d443c5dfeabd89df6d8'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.581Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: handle set_blocksize failures

ntfs3 uses buffer_heads, which don't handle block size > PAGE_SIZE well.
Without this, mounting we will hit the

        BUG_ON(offset >= folio_size(folio));

in folio_set_bh on the first __bread_gfp call.

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < df9dac4dbe557f6455a61e68cc09ef98b22f3686`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c5b8a7ec9a0a71518915c82b8552be1ccbb88288`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 78e10082f3e919b8863958feac5f269d3ade9469`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 24f7d1824b7581ae3daf9d443c5dfeabd89df6d8`
- `Linux < 6.6.158`
- `Linux < 6.12.111`
- `Linux < 6.18.53`
- `Linux (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
