PT-2026-72390

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the get nr free clusters function performs a heap allocation for a temporary file ra state before publishing the precomputed free cluster count,...

Linux Distros Unpatched Vulnerability : CVE-2026-72201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an...

Linux Distros Unpatched Vulnerability : CVE-2026-72198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: reject non-resident records for resident-only attributes The shared lookup-time attribute validator rejects non-resident $FILENAME and $VOLUMENAME records...

PT-2026-72378

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix mrec lock ABBA deadlock in rename ntfs file fsync, ntfs dir fsync and ntfs write inode lock an inode's mrec lock before taking the mrec lock of its parent directory. ntfs rename takes old ni-mrec lock and old dir ni-mre...

PT-2026-72375

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while allocating clusters can drop the last reference to the temporary attribute inode. Evicting that inode drops its reference to the base inode...

PT-2026-72541

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fallocate ntfs attr fallocate allocates holes and delayed allocations inside initialized size by looking up the current runlist element under ni-runlist.lock. The returned struct...

Linux Distros Unpatched Vulnerability : CVE-2026-72203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: skip extent mft records in writeback to prevent deadlock This patch fixes the ABBA deadlock between extentlock and extent mreclock triggered by xfstests...

Linux Distros Unpatched Vulnerability : CVE-2026-72205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: free volume-wide resources on fillsuper failure ntfsfillsuper's erroutnow path frees only the volume struct via kfreevol, leaving several vol-owned...

PT-2026-72372

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfs non resident attr insert range allocates hole rl before mapping the whole runlist. If ntfs attr map whole runlist fails, the error path drops ni-runlist.lock and...

PT-2026-72385

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmove length In do action's DeleteIndexEntryAllocation case, e-size comes from an on-disk INDEX BUFFER entry. When e-size makes e + e-size point past hdr + hdr-used, PtrOffsete1,...

PT-2026-72397

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfs attr find and ntfs external attr find check that generic resident attribute values fit in their attribute records and that fixed-size resident values are large enough. For...

PT-2026-72394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where index block headers are not strictly validated. The fix involves modifying the ntfs index block inconsisent function to implement stricter...

PT-2026-72379

In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx insert into buffer indx insert into buffer computes used = used1 - to copy - sp size; memmovede t, Add2Ptrsp, sp size, used - le32 to cpuhdr1-de off; where sp and sp size come from hdr...

PT-2026-72388

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The NTFS mapping-pairs parser accumulates relative Logical Cluster Number LCN deltas using a signed integer. A corrupted attribute can cause this addition to exceed the representable...

PT-2026-72395

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs resident attr resize function may incorrectly convert zero-length resident $DATA attributes to non-resident attributes when attempting t...

Linux Distros Unpatched Vulnerability : CVE-2026-72204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: centalize $INDEXROOT header validation Add a dedicated helper to perform stricter validation of $INDEXROOT and use it for both directory inodes and named...

Linux Distros Unpatched Vulnerability : CVE-2026-72207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfsresidentattrresize cannot...

Linux Distros Unpatched Vulnerability : CVE-2026-72210

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfsmappingpairsdecompress,...

Linux Distros Unpatched Vulnerability : CVE-2026-74570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist...

PT-2026-72376

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfs lookup inode by name ntfs lookup inode by name returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return a...