CVE-2026-72208
Critical
Description
In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup and ntfs_listxattr, this verifies that there is enough space in the EA entry before accessing the next_entry_offset field of the EA entry.
SeverityCritical
CVSS9.8
Exploit probability46. percentile0.6%
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linuxd9d9925de1d8f233cc60d3dc356e12f232f97c15, 937282f7d15b593d0be765fa2ced164130ec87f7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | c451d34ae14201c2bb40652bf74072a79ff82f7d ≤ v < d9d9925de1d8f233cc60d3dc356e12f232f97c15, c451d34ae14201c2bb40652bf74072a79ff82f7d ≤ v < 937282f7d15b593d0be765fa2ced164130ec87f7, 7.1 | d9d9925de1d8f233cc60d3dc356e12f232f97c15, 937282f7d15b593d0be765fa2ced164130ec87f7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.