ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-97437 · Microsoft / collected KEV context

cve-program · CVE-2026-97437

• https://git.kernel.org/stable/c/d1f98938e437732c0ecdfc8ee451e12a072f6d07
• https://git.kernel.org/stable/c/0505f1e7bb5b981b6ed62d98b26ddce76142865d
• https://git.kernel.org/stable/c/2f7d0ec8c10dc7bf7a8c9a9cb169f9a4d1fac2ba
• https://git.kernel.org/stable/c/ed6da1abeec50db9060d714f03743fe0b63e4fe4
• https://git.kernel.org/stable/c/6a8149a20e46086c756c2a9202e377c0b649a0c3
• https://git.kernel.org/stable/c/aa1bdbb39f49c5bc9779316891c40005517842a5

No related operational record is retained in the current change model.