CVE-2026-72477

A flaw was found in the Linux kernel's NTFS3 file system driver. This vulnerability occurs when a file rename operation fails, potentially leaving the file system in an inconsistent state. This inconsistency could lead to system instability or data integrity issues. The resolution ensures that affected inodes are correctly handled, preventing further operations on inconsistent data structures.

This vulnerability is rated as having Moderate severity because exploitation requires local system access to trigger a denial of service on mounted NTFS file systems, without enabling arbitrary code execution or data exposure. Red Hat Enterprise Linux and other Red Hat products are not affected by this flaw because the vulnerable code introduced in newer upstream kernels is not present in supported releases. Furthermore, the NTFS3 file system driver is not enabled in default Red Hat Enterprise Linux configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.