CVE-2026-72204

ntfs: centalize $INDEX_ROOT header validation

State: Published
Severity: 8.4 High
Published: Aug 15, 2026
Updated: Aug 18, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ntfs: centalize $INDEX_ROOT header validation

Add a dedicated helper to perform stricter validation of $INDEX_ROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks consistent across both read paths.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 to before b06730c6af58d3569883f8dd7c36a90aba5ecc0aAffected 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 to before 8b97b302f553a480fb76d2afd53cd6c0635a9dcdAffected
LinuxLinux	7.1Affected before 7.1Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.