CVE-2026-72200

Last refreshed2026-10-23

Status: UPDATED | Advisory ID: CVE-2026-72200

Key Details

CVE	CVE-2026-72200
CVSS Score / Version	9.8 (Critical) / CVSS v3.1
Updated	2026-10-21
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

ntfs: detect mapping-pairs LCN accumulator overflow

The NTFS mapping-pairs parser accumulates relative LCN deltas in a

signed integer. A corrupted attribute can drive that addition past

the representable range.

One corrupt runlist shape sets the accumulated LCN to S64_MAX and

then adds a delta of 1 in the next mapping-pairs entry.

Signed overflow is undefined and can turn an invalid runlist into a

different set of physical clusters.

Check the LCN addition for overflow before storing the next run. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-72200
CVE	https://www.cve.org/CVERecord?id=CVE-2026-72200

Source

Reference

NVD

CVE