AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72187

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's NTFS file system, specifically during inode eviction processes, which can lead to a self-deadlock condition. This occurs when an attribute-list update during cluster allocation drops the last reference to a temporary inode, causing a deadlock when the base inode is unlinked. System administrators and developers managing Linux systems with NTFS support should prioritize addressing this issue to prevent potential system hangs and ensure stable file operations.

CVE
CVE-2026-72187
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while allocating clusters can drop the last reference to the temporary attribute inode. Evicting that inode drops its reference to the base inode and can invoke ntfs_drop_big_inode() for the base inode from within the base inode's own writeback path. If the base inode is unlinked, ntfs_drop_big_inode() calls truncate_setsize(), which waits for the inode's folio writeback to complete. The same writeback worker is responsible for completing that writeback, so it waits for itself indefinitely. Prevent this self-deadlock by grabbing a reference to the base inode at the beginning of ntfs_writepages() and releasing it at the end of the function. This defers eviction until all bios have been submitted, allowing the wait for folio writeback to complete safely.