CVE-2026-72207 ntfs: not change 0-byte $DATA attribute to non-resident

In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfsresidentattrresize cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT recrord...

CVE-2026-72207 ntfs: not change 0-byte $DATA attribute to non-resident

In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfsresidentattrresize cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT recrord...

EUVD-2026-58965

In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfsresidentattrresize cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT recrord...

CVE-2026-72203

CVE-2026-72203 concerns the Linux kernel NTFS driver and describes a deadlock (ABBA) between extent_lock and extent mrec_lock triggered by writes to normal extents and the $MFT folio. The fix removes all extent_lock and extent mrec_lock acquisitions from the MFT folio writeback path, eliminating ...

CVE-2026-72195

CVE-2026-72195 concerns Linux kernel ntfs3: UpdateResidentValue may underflow data_size when attr_off/redo_len derive from on-disk LRH and aoff + dlen

EUVD-2026-58953

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attroff in UpdateResidentValue against dataoff In doaction's UpdateResidentValue case fslog.c:3307, lrh-attroff and lrh-redolen come from the on-disk LRH. When they satisfy aoff + dlen res.dataoff, the assignment...

CVE-2026-72188 ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfslookupinodebyname ntfslookupinodebyname returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return an...

CVE-2026-72188

The CVE-2026-72188 issue affects the Linux kernel NTFS handling: ntfs_lookup_inode_by_name() can return error-marked MFT references without validation, causing callers to misinterpret a MREF_ERR() with arbitrary low bits as a valid result. The vulnerability stems from untrusted on-disk MFT refere...

EUVD-2026-58946

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfslookupinodebyname ntfslookupinodebyname returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return an...

CVE-2026-72188 ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfslookupinodebyname ntfslookupinodebyname returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return an...

PT-2026-72383

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attr off in UpdateResidentValue against data off In do action's UpdateResidentValue case fslog.c:3307, lrh-attr off and lrh-redo len come from the on-disk LRH. When they satisfy aoff + dlen res.data off, the...

PT-2026-72542

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in MFT writeback ntfs write mft block maps each $MFT record through the $MFT data runlist. For sub-folio clusters it looks up a struct runlist element under ni-runlist.lock, drops the...

PT-2026-72376

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfs lookup inode by name ntfs lookup inode by name returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return a...

PT-2026-72395

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs resident attr resize function may incorrectly convert zero-length resident $DATA attributes to non-resident attributes when attempting t...

Linux Distros Unpatched Vulnerability : CVE-2026-72207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfsresidentattrresize cannot...

PT-2026-72391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An ABBA deadlock occurs in the NTFS driver due to conflicting lock acquisition orders between extent lock and mrec lock. The issue manifests through two competing paths: the inode...

EUVD-2026-46911

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-60549

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

PT-2026-62591

Name of the Vulnerable Software and Affected Versions Oracle Managed File Transfer versions 12.2.1.4.0 and 14.1.2.0.0 Description A flaw in the MFT Runtime Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the system. Successf...

PT-2026-62587

Name of the Vulnerable Software and Affected Versions Oracle Managed File Transfer versions 12.2.1.4.0 and 14.1.2.0.0 Description A flaw in the MFT Runtime Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the system. Successf...