CVE-2026-72192 ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head

🗓️ 15 Aug 2026 05:53:52Reported by GoogleType

osv🔗 osv.dev👁 5 Views

ntfs3 allows controlled OOB write of 120-136 bytes past kmalloc allocation via crafted full resident NTFS root with shrunk index_block_size.

Source	Link
git	www.git.kernel.org/stable/c/0af83b8155cc848e9f5d2c36e20a70d024214649
git	www.git.kernel.org/stable/c/194b00c99ba971fa7cf6acd747a36032c6de54eb
git	www.git.kernel.org/stable/c/53c5f3b2da3774b41534728aba295c098c9efa19
git	www.git.kernel.org/stable/c/9b6926ac9c970ae0b2c2fe6289b16e9aa10b6a67
git	www.git.kernel.org/stable/c/aaa1f956c0fc41089a4a534da7df91552a08a47c
git	www.git.kernel.org/stable/c/cb3161deebcaf8d36d3115abf452c633f2180fc1
git	www.git.kernel.org/stable/c/d240f5f9d036b8180224954d9873f172b6be4dd8
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72192.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-72192
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

18 Aug 2026 03:56Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.19.8