CVE-2026-72201

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in those paths.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/2221b691d7b2e17f08153f95848dacaa5d87e21d
https://git.kernel.org/stable/c/e2b95d3adb558ddd5685f9e072ec8661d57ee3a9

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:21

Updated : 2026-08-18 07:16

NVD link : CVE-2026-72201

Mitre link : CVE-2026-72201

CVE.ORG link : CVE-2026-72201

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72201", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0", "lessThan": "e2b95d3adb558ddd5685f9e072ec8661d57ee3a9", "versionType": "git"}, {"status": "affected", "version": "0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0", "lessThan": "2221b691d7b2e17f08153f95848dacaa5d87e21d", "versionType": "git"}], "programFiles": ["fs/ntfs/dir.c", "fs/ntfs/index.c", "fs/ntfs/index.h", "fs/ntfs/inode.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "7.1"}, {"status": "unaffected", "version": "0", "lessThan": "7.1", "versionType": "semver"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ntfs/dir.c", "fs/ntfs/index.c", "fs/ntfs/index.h", "fs/ntfs/inode.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:21:38.747", "references": [{"url": "https://git.kernel.org/stable/c/2221b691d7b2e17f08153f95848dacaa5d87e21d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e2b95d3adb558ddd5685f9e072ec8661d57ee3a9", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs: validate index entries on reading\n\nValidate index entries immediately after reading an index root or index\nblock from disk. This eliminates repeated checks in lookup and readdir,\nand reduce the risk of missing checks in those paths."}], "lastModified": "2026-08-18T07:16:53.460", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}