CVE-2026-72196

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ntfs3 file system during the analysis pass of the log replay() function. When processing a DIR PAGE ENTRY for a specific tuple, the system iterates through further entries based on lrh->lcns follow. Because the loop is not properly bounded against dp->lcns follow, a malformed Log Run Header (LRH) can cause a slab-out-of-bounds write. This occurs when the target vcn is near the end of the range and lrh->lcns follow is greater than one, leading to an overflow of the dp->page lcns[] array. The vulnerability involves the page lcns array and the target vcn and lcns follow variables.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.