CVE-2026-72205

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the NTFS driver during mount failures. When the ntfs fill super() function fails, the err out now path only frees the volume structure, failing to release other volume-owned allocations. Specifically, the vol->nls map loaded by ntfs init fs context() via load nls default() or ntfs parse param(), the vol->volume label allocated by load system files() through ntfs ucstonls(), and the vol->lcn empty bits per page resource are not properly freed. These resources accumulate with each failed mount attempt and can only be recovered by unloading the module. This is a silent leak because inodes loaded before the failure remain hashed, but no corruption warnings are emitted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.