CVE-2026-72471

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ntfs3 file system where the lcn variable may remain uninitialized. This occurs when a target VCN is not found within runs[0], leading run lookup() and run lookup entry() to return false. Consequently, the len value becomes 0, and a NULL parameter is passed to attr data get block(), causing attr data get block locked() to exit prematurely. This sequence triggers an uninitialized value error in the ni seek data or hole() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.