CVE-2026-40706

Name of the Vulnerable Software and Affected Versions NTFS-3G versions 2022.10.3 through 2026.2.24

Description A heap buffer overflow exists in the ntfs build permissions posix() function within acls.c. This issue allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by using a specially crafted malicious NTFS image. The overflow occurs during the READ path (stat, readdir, open) when the system processes a security descriptor containing multiple ACCESS DENIED ACEs (Access Control Entries) that include WRITE OWNER from different group SIDs.

Recommendations Update to version 2026.2.25.