Threats Tagged 'cve-2026-72192'

A vulnerability in the Linux kernel's NTFS3 driver allows a controlled out-of-bounds write due to improper bounds checking during promotion of a full resident $INDEX_ROOT to $INDEX_ALLOCATION. This occurs when a crafted NTFS image shrinks the index block size after the root is populated, causing a memcpy to write 120-136 bytes beyond the allocated buffer with attacker-controlled data. The flaw is triggered by an unprivileged open(O_CREAT) call on a mounted malicious NTFS image. The vulnerability results in a bounded adjacent-heap corruption, not an arbitrary write, and depends on heap layout for exploitation. The issue has been resolved by adding a check to reject copies that exceed the destination buffer capacity, failing with -EINVAL and marking the filesystem inconsistent.