CVE-2026-72210

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An off-by-one error exists in the ntfs mapping pairs decompress() function. The issue occurs because bounds checks use a strict greater-than operator when validating that mapping pair data bytes fit within the attribute record. When the data extends exactly to the attr end boundary, the check evaluates to false, allowing a one-byte out-of-bounds read. This same pattern is also present in the LCN delta bytes check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.