CVE-2026-72204

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from insufficient validation of the $INDEX_ROOT header, which is crucial for managing directory and file indexes. An attacker could potentially craft a specially malformed NTFS file system. Processing this malformed file system could lead to file system corruption or a denial of service (DoS) condition, impacting system availability.

Red Hat rates this vulnerability as a Moderate impact because exploitation requires local access and the capability to mount a crafted filesystem, limiting the blast radius to a denial of service. Default enterprise deployments do not automatically mount untrusted NTFS volumes, substantially reducing exposure. Additionally, supported Red Hat Enterprise Linux releases do not contain the vulnerable driver code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.