Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-72477

fs/ntfs3: call _ntfs_bad_inode() when failing to rename

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe to call _ntfs_bad_inode on live inodes since: commit 519b078998ce ("fs/ntfs3: Exclude call make_bad_inode for live nodes.") The WARN_ON was added when it wasn't safe by: commit d99208b91933 ("fs/ntfs3: cancle set bad inode after removing name fails") Replace the WARN_ON with a call to _ntfs_bad_inode() to prevent further operations on the inconsistent inode.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 519b078998ce6e729f98dccf35505b4756985d11 to < 580896e33003845de66c75cd61544cf9d9bfbe15affected
  • 519b078998ce6e729f98dccf35505b4756985d11 to < ff825bf0521f6da2f30878cbad18ab7b341bc31baffected
  • 519b078998ce6e729f98dccf35505b4756985d11 to < e8ed78f40eecd0176fda71d673f6957c98e7ffbeaffected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.18.57 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References