9.8
CVE-2026-72477
- EPSS 0.52%
- Veröffentlicht 15.08.2026 05:57:17
- Zuletzt bearbeitet 17.08.2026 06:19:15
- Erkennungen
fs/ntfs3: call _ntfs_bad_inode() when failing to rename
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: call _ntfs_bad_inode() when failing to rename
It is safe to call _ntfs_bad_inode on live inodes since:
commit 519b078998ce ("fs/ntfs3: Exclude call make_bad_inode for live nodes.")
The WARN_ON was added when it wasn't safe by:
commit d99208b91933 ("fs/ntfs3: cancle set bad inode after removing name fails")
Replace the WARN_ON with a call to _ntfs_bad_inode() to prevent further
operations on the inconsistent inode.Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
519b078998ce6e729f98dccf35505b4756985d11
Version <
ff825bf0521f6da2f30878cbad18ab7b341bc31b
Status
affected
Version
519b078998ce6e729f98dccf35505b4756985d11
Version <
e8ed78f40eecd0176fda71d673f6957c98e7ffbe
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
6.17
Status
affected
Version
0
Version <
6.17
Status
unaffected
Version <=
7.1.*
Version
7.1.5
Status
unaffected
Version <=
*
Version
7.2
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.52% | 0.415 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
https://git.kernel.org/stable/c/ff825bf0521f6da2f30878cbad18ab7b341bc31b
https://git.kernel.org/stable/c/e8ed78f40eecd0176fda71d673f6957c98e7ffbe