EUVD-2026-81726

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...

EUVD-2026-80306

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEXROOT in reparse/objid init ntfsreparseinit and ntfsobjidinit parse the index root of the $Extend/$Reparse and $Extend/$ObjId metafiles the INDEXROOT attributes named $R and $O. They read i...

CVE-2026-89785

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEXROOT in reparse/objid init ntfsreparseinit and ntfsobjidinit parse the index root of the $Extend/$Reparse and $Extend/$ObjId metafiles the INDEXROOT attributes named $R and $O. They read i...

CVE-2026-89785

CVE-2026-89785 is an out-of-bounds read in the Linux kernel's NTFS3 filesystem driver. The functions ntfs_reparse_init() and ntfs_objid_init() parse the INDEX_ROOT attributes ($R and $O) of the $Extend/$Reparse and $Extend/$ObjId metafiles using resident_data() , which fails to verify that the re...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Centralized validation of the $INDEXROOT header. A dedicated helper function has been added to perform more stringent validation of the $INDEXROOT, and this function is used for both directory inodes and named index...

CVE-2026-72204

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from insufficient validation of the $INDEXROOT header, which is crucial for managing directory and file indexes. An attacker could potentially craft a specially malformed NTFS file system. Processing this...

CVE-2026-72199

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident $INDEXROOT values carry index header fields that callers consume after lookup. Some callers already validate parts of the layout before walking entries, but those check...

CVE-2026-72204

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEXROOT header validation Add a dedicated helper to perform stricter validation of $INDEXROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks...

CVE-2026-72211

In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfsirreparent moves the resident index root entries into an index block and leaves a small root stub containing the child VCN. That root stub can be larger than the...

EUVD-2026-58969

In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfsirreparent moves the resident index root entries into an index block and leaves a small root stub containing the child VCN. That root stub can be larger than the...

CVE-2026-72204

In the Linux kernel NTFS code, CVE-2026-72204 targets the validation of the $INDEX_ROOT header. A dedicated helper was added to perform stricter validation of $INDEX_ROOT and is used for both directory inodes and named index inodes, ensuring consistent checks on root size and header geometry acro...