CVE-2026-72187

A flaw was found in the Linux kernel's NTFS file system driver. An attacker with local access could trigger a self-deadlock condition during inode eviction. This occurs when an attribute-list update during cluster allocation causes a temporary inode to lose its last reference, leading to an indefinite wait during writeback. Successful exploitation of this vulnerability could result in a Denial of Service (DoS), causing the system to become unresponsive.

This flaw is assessed as having a Moderate impact because exploitation requires local access to an active NTFS filesystem and is limited to causing a denial of service through a deadlock without compromising confidentiality or integrity. Red Hat Enterprise Linux is not affected by this vulnerability, as the affected writeback logic introduced in upstream Linux kernel releases is not present in supported Red Hat kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.