CVE-2026-72187

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A self-deadlock occurs during inode eviction in the NTFS driver. When an attribute-list update is performed during cluster allocation, it can drop the last reference to a temporary attribute inode. The subsequent eviction of that inode drops the reference to the base inode, which may trigger the ntfs drop big inode() function within the base inode's own writeback path. If the base inode is unlinked, ntfs drop big inode() calls truncate setsize(), which waits for the inode's folio writeback to complete. Because the same writeback worker is responsible for completing the operation, the system waits for itself indefinitely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.