CVE-2026-72209

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could craft a malicious NTFS image that causes the kernel to read beyond the intended memory boundary when processing $FILE_NAME attributes. This out-of-bounds read could lead to information disclosure or potentially a denial of service (DoS).

This vulnerability is rated as having Moderate impact because exploitation requires local access and the ability to mount a specially crafted filesystem image, limiting the blast radius primarily to denial of service through kernel panic or potential leak of uninitialized kernel memory. Mounting untrusted filesystems is typically restricted to privileged users or requires physical insertion of removable media on standard installations. Red Hat Enterprise Linux releases are not affected as the vulnerable code introduced in upstream kernel version 7.1 is not present in supported kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.