Critical 9.8Published Aug 15, 2026

CVE-2026-72200ntfs: detect mapping-pairs LCN accumulator overflow

Updated under an hour ago (2026-10-19 09:40 UTC)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN deltas in a signed integer. A corrupted attribute can drive that addition past the representable range. One corrupt runlist shape sets the accumulated LCN to S64_MAX and then adds a delta of 1 in the next mapping-pairs entry. Signed overflow is undefined and can turn an invalid runlist into a different set of physical clusters. Check the LCN addition for overflow before storing the next run.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7ffa8f3d30236e0ab897c30bdb01224ff1fe1c89; from 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 7fb64788812d137b37f6d8724e1e41c624c1e814; from 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before ec4f061f2219e0f0c6465d56d0380bf749235a53	CNA record

References

https://git.kernel.org/stable/c/7ffa8f3d30236e0ab897c30bdb01224ff1fe1c89
https://git.kernel.org/stable/c/7fb64788812d137b37f6d8724e1e41c624c1e814
https://git.kernel.org/stable/c/ec4f061f2219e0f0c6465d56d0380bf749235a53

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.