fs/ntfs3: bound attr_off in UpdateResidentValue against data_off

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-72195 · Microsoft / collected KEV context

cve-program · CVE-2026-72195

• https://git.kernel.org/stable/c/ab8761676d638c5be170aaf91b7ffdd451236616
• https://git.kernel.org/stable/c/53c12f178f584dc5f836ffe2782138a6e9348ed9
• https://git.kernel.org/stable/c/546518468e6c9ea469669eef78f8cc380ad6e2ca
• https://git.kernel.org/stable/c/97758fd9756b5f09e9ddc6a5f6a569041acc8421
• https://git.kernel.org/stable/c/50b5e83384e7fed3d11d18b79ff350e9d6d89861
• https://git.kernel.org/stable/c/a89c66674283a0293c0f266dc57087a6114371a3
• https://git.kernel.org/stable/c/d1570c48f49a693974d000251030370ee2e83539

No related operational record is retained in the current change model.