Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Centralized validation of the $INDEXROOT header. A dedicated helper function has been added to perform more stringent validation of the $INDEXROOT, and this function is used for both directory inodes and named index...

CVE-2026-72204

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from insufficient validation of the $INDEXROOT header, which is crucial for managing directory and file indexes. An attacker could potentially craft a specially malformed NTFS file system. Processing this...

CVE-2026-72199

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident $INDEXROOT values carry index header fields that callers consume after lookup. Some callers already validate parts of the layout before walking entries, but those check...

CVE-2026-72204

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEXROOT header validation Add a dedicated helper to perform stricter validation of $INDEXROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks...

CVE-2026-72211

In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfsirreparent moves the resident index root entries into an index block and leaves a small root stub containing the child VCN. That root stub can be larger than the...

EUVD-2026-58969

In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfsirreparent moves the resident index root entries into an index block and leaves a small root stub containing the child VCN. That root stub can be larger than the...

CVE-2026-72204

In the Linux kernel NTFS code, CVE-2026-72204 targets the validation of the $INDEX_ROOT header. A dedicated helper was added to perform stricter validation of $INDEX_ROOT and is used for both directory inodes and named index inodes, ensuring consistent checks on root size and header geometry acro...