CVE-2026-56136

An out-of-bounds read in ntfs_ir_nill() within libntfs-3g/index.c affects NTFS-3G through 2026.2.25 . An attacker can trigger the vulnerability by crafting a malicious NTFS image and creating a file with a crafted name, leading to disclosure of confidential information from the ntfs-3g process me...

CVE-2026-56135

A heap-based buffer overflow in the build_inherited_id() function of libntfs-3g/security.c affects NTFS-3G through 2026.2.25 . The overflow is triggered when an attacker mounts a maliciously crafted NTFS image and creates a file within a crafted directory. Because the ntfs-3g binary runs with SUI...

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

USN-8668-1 linux-gcp-5.15 vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

USN-8668-1: Linux kernel (GCP) vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

CVE-2026-72354

A flaw was found in the Linux kernel's NTFS file system driver. A local attacker could trigger a use-after-free vulnerability during Master File Table MFT writeback operations. This occurs due to a timing issue where memory is freed while still being accessed, which can lead to a system crash,...

CVE-2026-72353

A flaw was found in the Linux kernel's NTFS file system driver. A use-after-free vulnerability exists in the ntfsattrfallocate function, where a runlist element is accessed after its memory has been deallocated by a concurrent operation. A local attacker could exploit this to trigger a system...

CVE-2026-52792

Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., and x.lua . An unauthenticated client can append one of thes...

CVE-2026-52792 Algernon: Server-side script source disclosure on Windows via NTFS filename

Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., and x.lua . An unauthenticated client can append one of thes...

EUVD-2026-62506

Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., and x.lua . An unauthenticated client can append one of thes...

CVE-2026-52792 Algernon: Server-side script source disclosure on Windows via NTFS filename

Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., and x.lua . An unauthenticated client can append one of thes...

CVE-2026-52792

Algernon (a pure-Go web server) prior to 1.17.9 is vulnerable to server-side script source disclosure on Windows via NTFS filename aliasing. The root cause is in engine/handlers.go: filepath.Ext() does not recognize NTFS-equivalent suffixes (::$DATA, trailing dot, trailing space) as the script ex...

CVE-2026-72210

A flaw was found in the Linux kernel's NTFS filesystem driver. An error in how the driver checks the boundaries of data it processes, specifically an 'off-by-one' error, allows it to read one byte beyond its intended memory region. This 'out-of-bounds read' could potentially lead to the disclosur...

CVE-2026-72209

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could craft a malicious NTFS image that causes the kernel to read beyond the intended memory boundary when processing $FILENAME attributes. This out-of-bounds read could lead to information disclosure or potentially a...

CVE-2026-72208

A flaw was found in the Linux kernel's NTFS file system driver. A missing bounds check when processing Extended Attribute EA entries in the ntfsealookup and ntfslistxattr functions could allow a local attacker to craft a malicious NTFS file system. When this file system is mounted, it could lead ...

CVE-2026-72207

A flaw was found in the NTFS file system driver in the Linux kernel. When the ntfsresidentattrresize function attempts to free space by converting resident attributes to non-resident, it incorrectly selects zero-length $DATA attributes for this conversion. This can lead to fsck file system check...

CVE-2026-72206

A flaw was found in the Linux kernel's NTFS filesystem driver. Insufficient validation of index block headers within INDX blocks could allow a local attacker to craft a malicious NTFS filesystem image. When this image is processed by the kernel, it could lead to a kernel panic due to an...

CVE-2026-72205

A flaw was found in the Linux kernel's NTFS filesystem driver. When an attempt to mount an NTFS volume fails, the ntfsfillsuper function's error handling path does not properly free all volume-wide resources. This oversight leads to a silent resource leak, where memory and other resources...

CVE-2026-72204

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from insufficient validation of the $INDEXROOT header, which is crucial for managing directory and file indexes. An attacker could potentially craft a specially malformed NTFS file system. Processing this...

CVE-2026-72202

A flaw was found in the Linux kernel's NTFS filesystem driver. When calculating free clusters or Master File Table MFT records, a temporary state object is allocated on the heap. If this allocation fails, processes waiting for these counts can become unresponsive, leading to a denial of service D...