CVE-2026-72197

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS3 file system driver where the do action() function fails to properly validate the length of a memory move operation during the DeleteIndexEntryAllocation case. Specifically, when the e->size value from an on-disk INDEX BUFFER entry causes a pointer to exceed the buffer boundaries, the PtrOffset() function returns a negative ptrdiff t. This value is then cast to a very large size t when passed to the memmove() function, leading to an out-of-bounds memory access that can cause a kernel oops. This can be triggered by mounting a specially crafted NTFS image.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.