CVE-2026-72353

A flaw was found in the Linux kernel's NTFS file system driver. A use-after-free vulnerability exists in the ntfs_attr_fallocate() function, where a runlist element is accessed after its memory has been deallocated by a concurrent operation. A local attacker could exploit this to trigger a system crash, resulting in a denial of service.

This flaw is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires an authenticated local user with write privileges on an NTFS filesystem and leads exclusively to a system crash. The underlying race condition during concurrent file allocation operations cannot be triggered remotely or without active write access to an NTFS mount. Furthermore, supported Red Hat Enterprise Linux distributions do not incorporate the affected code introduced in recent upstream kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.