CVE-2026-56135
MediumSummary
In NTFS-3G through version 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c. An attacker can exploit this by crafting a malicious NTFS image, causing heap memory corruption in the SUID-root ntfs-3g binary.
Risk Assessment
The risk involves potential privilege escalation by a local user to gain root access, which could lead to full system compromise.
Recommendation
It is recommended to immediately update NTFS-3G to a version later than 2026.2.25 that includes a fix for this vulnerability. If an update is not possible, consider removing the SUID bit from the ntfs-3g binary.
Original NVD description (English source)
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted