CVE-2026-72209: In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfs_att
Summary
A vulnerability in the Linux kernel's NTFS file system allows attackers to read memory beyond intended boundaries by crafting a malicious disk image with mismatched length fields in file name attributes. The flaw occurs because the kernel trusts embedded length values without proper validation, potentially exposing sensitive data when the system tries to read or compare file names.
Solution / Mitigation
Add a shared attribute value validator that checks resident value bounds, minimum sizes, variable-length file name fields, and non-resident metadata before returning attributes from lookup functions. Apply this validation across all lookup paths, including the AT_UNUSED case, and reject non-resident $FILE_NAME records since the format requires them to be resident.
Vulnerability Details
EPSS: 0.0%
August 15, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-72209
First tracked: August 15, 2026 at 08:08 AM
Classified by LLM (prompt v3) · confidence: 95%