CVE-2026-72200
Description
In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN deltas in a signed integer. A corrupted attribute can drive that addition past the representable range. One corrupt runlist shape sets the accumulated LCN to S64_MAX and then adds a delta of 1 in the next mapping-pairs entry. Signed overflow is undefined and can turn an invalid runlist into a different set of physical clusters. Check the LCN addition for overflow before storing the next run.
How to fix
- Linux Linuxb06b4fc2138ded8ee0b3dc602991ff6dbb10dd0a, 6626fb859f4c4772f2f59751d23937716e03f98f, 7ffa8f3d30236e0ab897c30bdb01224ff1fe1c89, 7fb64788812d137b37f6d8724e1e41c624c1e814, ec4f061f2219e0f0c6465d56d0380bf749235a53 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < b06b4fc2138ded8ee0b3dc602991ff6dbb10dd0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 6626fb859f4c4772f2f59751d23937716e03f98f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 7ffa8f3d30236e0ab897c30bdb01224ff1fe1c89, 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 ≤ v < 7fb64788812d137b37f6d8724e1e41c624c1e814, 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 ≤ v < ec4f061f2219e0f0c6465d56d0380bf749235a53, 2.6.12, 7.1 | b06b4fc2138ded8ee0b3dc602991ff6dbb10dd0a, 6626fb859f4c4772f2f59751d23937716e03f98f, 7ffa8f3d30236e0ab897c30bdb01224ff1fe1c89, 7fb64788812d137b37f6d8724e1e41c624c1e814, ec4f061f2219e0f0c6465d56d0380bf749235a53 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.