What’s Vulnerable › Vulnerabilities

CVE-2026-72207: ntfs: not change 0-byte $DATA attribute to non-resident

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-18

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfs_resident_attr_resize() cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT recrord. Do not select zero-length resident $DATA attributes for this conversion. fsck treats 0-byte non-resident $DATA attribute as corruptions.

Affected products

• Linux kernel: 7.1 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0aad21570197973af4a1b25b3fb8ed3aeb9e7670
• https://git.kernel.org/stable/c/ceb49c37250125d418410988f2376ed4d57a6706

Get alerted when CVE-2026-72207 or the next vulnerability affects your stack