CVE-2026-72204

HighCVSS 8.4

Published: 15/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

In the Linux kernel, the NTFS filesystem centralized $INDEX_ROOT header validation. A dedicated helper was added for stricter validation of $INDEX_ROOT and is used for both directory inodes and named index inodes. This keeps root size and header geometry checks consistent across both read paths.

Risk Assessment

Inconsistent validation could lead to missed errors in data structures, potentially causing incorrect behavior or crashes.

Recommendation

Update the kernel to a version with this fix.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX_ROOT header validation Add a dedicated helper to perform stricter validation of $INDEX_ROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks consistent across both read paths.