CVE-2026-72354

A flaw was found in the Linux kernel's NTFS file system driver. A local attacker could trigger a use-after-free vulnerability during Master File Table (MFT) writeback operations. This occurs due to a timing issue where memory is freed while still being accessed, which can lead to a system crash, resulting in a Denial of Service (DoS).

Red Hat rates this vulnerability as Moderate severity because triggering the issue requires local access to write to an NTFS volume, limiting the blast radius to a denial of service without compromising data confidentiality or system integrity. Furthermore, Red Hat Enterprise Linux releases are not affected, as the susceptible code introduced in newer upstream kernels was never incorporated into supported enterprise kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.