CVE-2026-72199

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS driver where resident $INDEX ROOT values are not fully validated during lookup. The index header fields, which are consumed by callers after lookup, lacked consistent validation for root header invariants. This includes missing checks for entries offset alignment and lower bounds, as well as inconsistencies between index length and allocated size. The vulnerability is addressed by adding $INDEX ROOT to the minimum resident value size table and enforcing 8-byte alignment for index header fields, ensuring a valid entries offset, verifying that index length is within allocated size, and confirming that allocated size fits within the resident value with sufficient space for an index entry header.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.