CVE-2026-72198

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS driver where the shared lookup-time attribute validator fails to reject non-resident records for certain resident-only attribute types. This creates resident/non-resident union confusion paths. Specifically, the system may read data.resident.value offset without verifying the a->non resident flag during operations involving $STANDARD INFORMATION, $VOLUME INFORMATION, and $INDEX ROOT. This flaw affects how the kernel handles attribute lookups in ntfs inode sync standard information(), ntfs write volume flags(), and within dir.c and index.c for index root values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.