Threats tagged 'ghsa-mq97-h32x-42x9'

CVE-2026-43245 is a vulnerability in the Linux kernel's NTFS filesystem driver where the ->d_compare() function improperly blocks, violating kernel expectations. The issue arises from using __getname() which can block, and the fix involves switching to non-blocking memory allocation with kmalloc(PATH_MAX, GFP_NOWAIT). This prevents blocking in the d_compare() callback and stops misuse of the names_cachep cache in NTFS code.