CVE-2026-74570

Received Received - Intake

Buffer Overflow Fix in Linux Kernel NTFS Filesystem

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfs_rl_realloc() and ntfs_rl_realloc_nofail().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74570

EUVD

EUVD-2026-59635

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the NTFS file system's runlist reallocation functions. The issue is related to unsafe size calculations when converting runlist element counts to byte sizes, which could lead to integer overflows or incorrect memory allocations.

Detection Guidance

This vulnerability is specific to the Linux kernel's NTFS file system handling. Detection requires checking kernel versions and NTFS-related modules. Use uname -a to check kernel version and lsmod | grep ntfs to verify NTFS module loading. Monitor kernel logs for NTFS-related errors or crashes.

Impact Analysis

An attacker could exploit this vulnerability to cause memory corruption, crashes, or potentially execute arbitrary code in the kernel. This could lead to system instability, denial of service, or unauthorized access to sensitive data.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a low-level kernel memory handling issue in the NTFS filesystem. Compliance impact would depend on system-specific configurations and data processing activities rather than this vulnerability itself.

Mitigation Strategies

Apply the latest kernel updates from your Linux distribution to patch the NTFS vulnerability. If immediate updates are unavailable, consider disabling NTFS support temporarily by unloading the ntfs module with rmmod ntfs or blacklisting it. Monitor vendor advisories for official patches.

Hi! I’m here to help you understand CVE-2026-74570. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70