CVE-2026-72204

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX_ROOT header validation Add a dedicated helper to perform stricter validation of $INDEX_ROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks consistent across both read paths.

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/8b97b302f553a480fb76d2afd53cd6c0635a9dcd
https://git.kernel.org/stable/c/b06730c6af58d3569883f8dd7c36a90aba5ecc0a

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:21

Updated : 2026-08-18 07:16

NVD link : CVE-2026-72204

Mitre link : CVE-2026-72204

CVE.ORG link : CVE-2026-72204

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72204", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0", "lessThan": "b06730c6af58d3569883f8dd7c36a90aba5ecc0a", "versionType": "git"}, {"status": "affected", "version": "0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0", "lessThan": "8b97b302f553a480fb76d2afd53cd6c0635a9dcd", "versionType": "git"}], "programFiles": ["fs/ntfs/index.c", "fs/ntfs/index.h", "fs/ntfs/inode.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "7.1"}, {"status": "unaffected", "version": "0", "lessThan": "7.1", "versionType": "semver"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ntfs/index.c", "fs/ntfs/index.h", "fs/ntfs/inode.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:21:39.090", "references": [{"url": "https://git.kernel.org/stable/c/8b97b302f553a480fb76d2afd53cd6c0635a9dcd", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b06730c6af58d3569883f8dd7c36a90aba5ecc0a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs: centalize $INDEX_ROOT header validation\n\nAdd a dedicated helper to perform stricter validation of $INDEX_ROOT and\nuse it for both directory inodes and named index inodes. This keeps the\nroot size and header geometry checks consistent across both read paths."}], "lastModified": "2026-08-18T07:16:53.780", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}