CVE-2026-72354

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the NTFS driver during MFT writeback. The function ntfs write mft block() retrieves a runlist element while holding the ni->runlist.lock, but releases the lock before accessing the rl->length and rl->vcn variables to determine the folio sz. If a concurrent MFT allocation extension occurs, the ntfs rl realloc() function may free the old runlist array. If this happens after the lock is dropped but before the variables are read, the system dereferences freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.