AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72186

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's NTFS driver, specifically allowing userspace access to critical system files like $Bitmap, which can lead to volume corruption and deadlocks during write operations. This issue has been addressed by marking essential metadata files as immutable, preventing unauthorized modifications through the file interface. Organizations using Linux systems with NTFS support should prioritize this update to safeguard against potential data integrity issues.

CVE
CVE-2026-72186
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via show_sys_files and written from userspace, the volume is corrupted and, because the cluster allocator scans $Bitmap through the same inode's page cache, a write to $Bitmap also deadlocks writeback against the folio it already holds locked. These files are maintained by the driver itself and have no valid reason to be written through the file interface. Mark base metadata files (mft_no < FILE_first_user) as immutable during inode read so the VFS rejects write, mmap, truncate and unlink with -EPERM. Directories are skipped so the root and $Extend remain usable. Internal metadata updates do not go through the VFS write path and are unaffected.