CVE-2026-72477
Received Received - Intake

Linux Kernel NTFS3 Inode Corruption Fix

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe to call _ntfs_bad_inode on live inodes since: commit 519b078998ce ("fs/ntfs3: Exclude call make_bad_inode for live nodes.") The WARN_ON was added when it wasn't safe by: commit d99208b91933 ("fs/ntfs3: cancle set bad inode after removing name fails") Replace the WARN_ON with a call to _ntfs_bad_inode() to prevent further operations on the inconsistent inode.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72477
EUVD
EUVD-2026-59376

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of inode renaming in the NTFS3 filesystem. When a rename operation fails, the system incorrectly triggers a warning instead of marking the inode as bad. This could allow further operations on an inconsistent inode, potentially leading to filesystem corruption or unexpected behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's NTFS3 filesystem and does not have a direct network detection method. To check for affected systems, verify if your Linux kernel version includes the vulnerable NTFS3 code. Use commands like 'uname -a' to check the kernel version and 'modinfo ntfs3' to confirm the module is loaded.

Impact Analysis

If exploited, this flaw could cause filesystem corruption, data loss, or system crashes. Users might experience application failures, system instability, or inability to access files on NTFS3 volumes. Systems relying on NTFS3 for storage could be particularly affected.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. If you cannot update immediately, consider disabling the NTFS3 filesystem module if not in use by running 'modprobe -r ntfs3'.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72477. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart