CVE-2026-99171

A flaw was found in the Linux kernel's NTFS3 file system driver. When an NTFS file system is mounted with case-insensitive naming, internal file system structures can be released prematurely while a lookup operation is still active. A local attacker can exploit this race condition to cause a use-after-free condition, where memory is accessed after being freed, resulting in a Denial of Service (DoS) through a kernel crash or potential memory corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.