CVE-2026-72193

A flaw was found in the Linux kernel's ntfs3 driver. A remote attacker could exploit this by providing a specially crafted NTFS3 disk image, which, when mounted, triggers an in-kernel infinite loop. This can cause the system to hang, leading to a Denial of Service (DoS) where the system becomes unresponsive.

This vulnerability is rated as Moderate severity for Red Hat products because triggering the issue requires mounting a malicious file system image, limiting impact to a local denial of service rather than system compromise. An attacker must possess administrative privileges (such as CAP_SYS_ADMIN) to perform a mount operation or rely on desktop automount services processing untrusted physical storage. Default installations of Red Hat Enterprise Linux do not enable the ntfs3 file system driver, leaving standard enterprise deployments unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.