CVE-2026-72209

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS driver where resident attribute values are not properly validated during lookup. Specifically, in variable-length resident formats, embedded length fields can point beyond the resident value. A crafted image can set a small value length for a resident $FILE NAME attribute while maintaining a large file name length. This causes callers to read past the resident value when converting or comparing the name, leading to a slab-out-of-bounds read from the MFT record copy. This behavior was observed in functions including ntfs lookup(), ntfs iget(), ntfs read locked inode(), ntfs attr name get(), ntfs ucstonls(), and utf16s to utf8s(). The issue is triggered via ntfs attr find() and ntfs external attr find().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.