CVE-2026-72353

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the NTFS driver. The function ntfs attr fallocate() retrieves a pointer to a runlist element while holding a read lock on ni->runlist.lock. However, the lock is dropped before the element's fields—rl->lcn, rl->length, and rl->vcn—are read. This creates a race condition where a concurrent writer can call ntfs rl realloc() via the ntfs filemap page mkwrite() path to reallocate and free the runlist array, causing the subsequent reads in ntfs attr fallocate() to access freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.