CVE-2026-74570

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from insufficient size calculations during runlist memory reallocation, which could lead to an integer overflow. An attacker could potentially exploit this to cause memory corruption, leading to system instability or a denial of service (DoS).

This vulnerability is rated as having a Moderate impact because exploitation requires local privileges to mount or manipulate a specially crafted file system, limiting the immediate consequence to localized memory corruption or denial of service. Red Hat Enterprise Linux releases are not affected by this flaw because the vulnerable code introduced in upstream development is not included in supported distributions. In typical enterprise environments, NTFS file systems are not mounted automatically, further reducing potential exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.