CVE-2026-72189

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A self-deadlock occurs in the find inode() function within the NTFS driver. The issue arises when generic shutdown super() clears SB ACTIVE before evicting cached inodes. If the eviction process selects a fake inode for a base inode's unnamed $ATTRIBUTE LIST attribute, ntfs evict big inode() drops the reference on the base inode while the fake inode is still marked as I FREEING. This can trigger a synchronous writeback of the base inode, which may call ntfs attrlist update(). Subsequently, ntfs attrlist update() calls ntfs attr iget() for the same $ATTRIBUTE LIST fake inode. The Virtual File System (VFS) then waits for the eviction to finish, but since the current task is the one performing the eviction, a deadlock occurs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.