CVE-2026-42617
MediumSummary
In NTFS-3G through version 2026.2.25, a heap buffer overflow exists in the ntfs_ir_to_ib() function in index.c. An attacker can exploit this by crafting a malicious NTFS image that, when mounted and a directory is extended (e.g., by creating a file), corrupts heap memory in the SUID-root ntfs-3g binary.
Risk Assessment
The risk is potential local privilege escalation or arbitrary code execution in the root context, as the vulnerable binary runs with elevated privileges. The attack requires system access and the ability to mount a crafted NTFS image.
Recommendation
Immediately update NTFS-3G to a version newer than 2026.2.25 once a patch is available. Until then, avoid mounting NTFS images from untrusted sources and consider temporarily removing the SUID bit from the ntfs-3g binary.
Original NVD description (English source)
In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.