CVE-2026-72207

A flaw was found in the NTFS file system driver in the Linux kernel. When the ntfs_resident_attr_resize() function attempts to free space by converting resident attributes to non-resident, it incorrectly selects zero-length $DATA attributes for this conversion. This can lead to fsck (file system check) treating these 0-byte non-resident $DATA attributes as corruptions, potentially resulting in file system integrity issues.

This vulnerability is rated as having a Moderate impact because exploitation requires local write access to an NTFS volume and primarily leads to filesystem inconsistency or denial of service rather than privilege escalation. Red Hat Enterprise Linux is not affected by this flaw because the vulnerable NTFS write implementation is not enabled in supported Red Hat kernels. Consequently, default enterprise installations are not exposed to this risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.