CVE-2026-90117 | Linux Kernel up to 7.2.5 NTFS ntfs_mft_record_alloc usa_ofs use after free

September 17, 2026 Yanac

A vulnerability marked as very critical has been reported in Linux Kernel up to 7.2.5. Affected by this issue is the function ntfs_mft_record_alloc of the component NTFS. This manipulation of the argument usa_ofs causes use after free.

This vulnerability is tracked as CVE-2026-90117. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More