Critical severity · published Aug 15, 2026
CVE-2026-72201
ntfs: validate index entries on reading
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
ntfs: validate index entries on reading
Validate index entries immediately after reading an index root or index
block from disk. This eliminates repeated checks in lookup and readdir,
and reduce the risk of missing checks in those paths.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before e2b95d3adb558ddd5685f9e072ec8661d57ee3a9; 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before 2221b691d7b2e17f08153f95848dacaa5d87e21d; 7.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-72201
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-72201
git.kernel.org
https://git.kernel.org/stable/c/2221b691d7b2e17f08153f95848dacaa5d87e21d
git.kernel.org
https://git.kernel.org/stable/c/e2b95d3adb558ddd5685f9e072ec8661d57ee3a9
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
7.8
CVE-2025-38352
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()