SB20260816341 - Infinite loop in Linux kernel ntfs3
Published: August 16, 2026
Security Bulletin ID
SB20260816341
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Infinite loop (CVE-ID: CVE-2026-72193)
CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to an infinite loop in check_rstbl() in the ntfs3 driver when mounting a crafted NTFS3 disk image. A local user can provide a specially crafted filesystem image to cause a denial of service.
User interaction may be required in environments that automatically mount attached removable media.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0fad25687d4d3fa1fdd313d31b9cb5817c425029
- https://git.kernel.org/stable/c/29b86dbe88cbbef53bb9aaec2e279359f8c450f8
- https://git.kernel.org/stable/c/7972df425687daa70d971fe6ed415e78683133dd
- https://git.kernel.org/stable/c/7ac4c86915c24c208a0f0611b71d9676686fe756
- https://git.kernel.org/stable/c/8128bec895075253c779d67afdc90ae513265fca
- https://git.kernel.org/stable/c/9611f644302c07d21bc8af97e3e06a3d30064253
- https://git.kernel.org/stable/c/d313416280d41bea272f02a6034dfa88008692a0