Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-72204

ntfs: centalize $INDEX_ROOT header validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX_ROOT header validation Add a dedicated helper to perform stricter validation of $INDEX_ROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks consistent across both read paths.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 to < b06730c6af58d3569883f8dd7c36a90aba5ecc0aaffected
  • 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 to < 8b97b302f553a480fb76d2afd53cd6c0635a9dcdaffected

Linux Linux

Default version status: affected

  • 7.1affected
  • 0 to < 7.1unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References