CVE-2026-72195

A flaw was found in the Linux kernel's ntfs3 file system driver. An integer underflow vulnerability occurs in the UpdateResidentValue function when processing a maliciously crafted Log Record Header (LRH). This underflow can lead to an incorrect calculation of data_size, allowing subsequent operations to read up to 4 Gigabytes (GiB) of memory beyond the intended buffer. This out-of-bounds read could result in information disclosure.

This vulnerability is rated as Moderate severity because exploitation requires local privileges or physical media insertion to mount a specially structured NTFS volume, and the resulting out-of-bounds read is confined to local denial of service or potential kernel memory exposure rather than remote system compromise. Red Hat Enterprise Linux releases do not build or enable the ntfs3 filesystem driver in supported kernel packages, significantly reducing exposure under standard operating environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.