CVE-2026-63793

In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol-volumelabel with a mutex and snaphost the label before copytouser. This prevent a use-after-free when FSIOCSETFSLABEL replaces the vol-volumelabel and FSIOCGETTSLABEL reads it...

CVE-2026-63793

CVE-2026-63793 affects the Linux kernel’s NTFS handling. The issue arises from unsafe concurrent access to vol->volume_label during FS_IOC_SETFSLABEL and FS_IOC_GETTSLABEL, which could lead to a use-after-free. The patch inserts a mutex to guard the volume_label and snapshots the label before ...

CVE-2026-63793

In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol-volumelabel with a mutex and snaphost the label before copytouser. This prevent a use-after-free when FSIOCSETFSLABEL replaces the vol-volumelabel and FSIOCGETTSLABEL reads it...

Linux Distros Unpatched Vulnerability : CVE-2026-63793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: serialize volume label accesses Protect vol-volumelabel with a mutex and snaphost the label before copytouser. This prevent a use-after-free when...

7-Zip < 26.01 NTFS Heap Buffer Overflow (GHSL-2026-140)

The version of 7-Zip installed on the remote Windows host is prior to 26.01. It is, therefore, affected by a vulnerability: - A heap buffer overflow vulnerability exists in the NTFS archive handler. The CInStream::GetCuSize function computes the compression-unit buffer size using a 32-bit shift...

USN-8554-1: NTFS-3G vulnerabilities

It was discovered that NTFS-3G had a heap buffer overflow when reading certain NTFS images. A local attacker could possibly use this issue to execute arbitrary code. CVE-2026-42616 It was discovered that NTFS-3G had multiple heap buffer overflows when processing certain NTFS images. A local...

USN-8554-1 ntfs-3g vulnerabilities

It was discovered that NTFS-3G had a heap buffer overflow when reading certain NTFS images. A local attacker could possibly use this issue to execute arbitrary code. CVE-2026-42616 It was discovered that NTFS-3G had multiple heap buffer overflows when processing certain NTFS images. A local...

Linux Distros Unpatched Vulnerability : CVE-2026-46572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfsibcuttail in libntfs-3g/index.c that allows an...

Linux Distros Unpatched Vulnerability : CVE-2026-56136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an...

Linux Distros Unpatched Vulnerability : CVE-2026-42617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-42616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, a heap buffer overflow exists in cat in cat.c that allows an attacker to corrupt heap...

Linux Distros Unpatched Vulnerability : CVE-2026-46571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an...

Linux Distros Unpatched Vulnerability : CVE-2026-56135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in...

Linux Distros Unpatched Vulnerability : CVE-2026-42618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-46569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfsibcopytail, in libntfs-3g/index.c, that allows a...

Linux Distros Unpatched Vulnerability : CVE-2026-46570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ntfs-3g - None Ubuntu Linux - In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfsindexwalkdown in libntfs-3g/index.c that allows ...

[SECURITY] [DSA 6389-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6389-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2026 https://www.debian.org/security/faq -...

UBUNTU-CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

UBUNTU-CVE-2026-42616

In NTFS-3G through 2026.2.25, a heap buffer overflow exists in cat in cat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

UBUNTU-CVE-2026-46569

In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfsibcopytail, in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...