CVE-2026-72184: ntfs: fix hole runlist memory leak in insert range error path
In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix hole runlist memory leak in insert range error path
ntfsnonresidentattrinsertrange() allocates holerl before mapping the whole runlist. If ntfsattrmapwholerunlist() fails, the error path drops ni->runlist.lock and returns without freeing holerl. This leaks memory of sizeof(holerl) 2 bytes.
Fix this memory leak by freeing holerl before returning from that error path, matching the later error paths in the same function.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72184?
CVE-2026-72184 is classified with a risk level of 2, indicating a medium severity vulnerability.
How do I fix CVE-2026-72184?
To fix CVE-2026-72184, ensure that you update your Linux kernel to a version that includes the patch for this vulnerability.
What systems are affected by CVE-2026-72184?
CVE-2026-72184 affects the Linux kernel with implementations involving the NTFS filesystem.
What is the impact of CVE-2026-72184?
The impact of CVE-2026-72184 involves a memory leak that could potentially lead to increased memory usage.
Is there a workaround for CVE-2026-72184?
Currently, there are no recommended workarounds for CVE-2026-72184 other than applying the necessary updates.