CVE-2026-72201

A flaw was found in the Linux kernel's New Technology File System (NTFS) implementation. This vulnerability arises from insufficient validation of index entries when reading index roots or blocks from disk. An attacker could potentially craft a malicious NTFS filesystem, which, when processed by the kernel, might lead to data integrity issues or system instability by bypassing intended checks during file system operations.

Red Hat has classified this vulnerability as having a Moderate severity because exploitation requires local access or attaching a specially formatted storage device to trigger the flaw, limiting the threat scope primarily to denial of service. Default installations of Red Hat Enterprise Linux do not enable the legacy NTFS kernel module, significantly minimizing exposure in production environments. Furthermore, the affected code is not present in supported enterprise kernel packages, meaning standard configurations remain unaffected unless custom kernels or external drivers are deployed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.