CVE-2026-72190

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix mrec_lock ABBA deadlock in rename ntfs_file_fsync(), ntfs_dir_fsync() and __ntfs_write_inode() lock an inode's mrec_lock before taking the mrec_lock of its parent directory. ntfs_rename() takes old_ni->mrec_lock and old_dir_ni->mrec_lock before taking new_ni->mrec_lock for an existing target, or new_dir_ni->mrec_lock for a cross-directory rename. This can deadlock when ntfs_file_fsync() or __ntfs_write_inode() holds the target inode, or when ntfs_dir_fsync() holds a child target directory, while rename() holds the parent directory and waits for the target. Fix this by locking the existing target inode before taking any parent directory mrec_lock. For cross-directory renames where the target parent is a descendant of the source parent, lock the target parent before the source parent so the directory order matches the child-to-parent order used by ntfs_file_fsync(), ntfs_dir_fsync(), and __ntfs_write_inode().

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linuxb3d09502b80dfe0bab9090ca532710da389f6c7f, eb94f5a41a193a425e09a63cb75dffd151d8f42e or later

Affected products

ProductAffected versionsFixed in
Linux Linuxaf0db57d4293cc9fe6ce99fb5592dc2652228c9d ≤ v < b3d09502b80dfe0bab9090ca532710da389f6c7f, af0db57d4293cc9fe6ce99fb5592dc2652228c9d ≤ v < eb94f5a41a193a425e09a63cb75dffd151d8f42e, 7.1b3d09502b80dfe0bab9090ca532710da389f6c7f, eb94f5a41a193a425e09a63cb75dffd151d8f42e

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-72190 · Linux · Dark Radar