PT-2026-34185 · Ntfs-3G+2 · Ntfs-3G+2

Published 2026-04-21 · Updated 2026-04-28 · CVE-2026-40706

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NTFS-3G versions 2022.10.3 through 2026.2.24

Description A heap buffer overflow exists in the ntfs build permissions posix() function within acls.c. This issue allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by using a specially crafted malicious NTFS image. The overflow occurs during the READ path (stat, readdir, open) when the system processes a security descriptor containing multiple ACCESS DENIED ACEs (Access Control Entries) that include WRITE OWNER from different group SIDs.

Recommendations Update to version 2026.2.25.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-40706

OESA-2026-2100

OESA-2026-2101

OESA-2026-2102

OESA-2026-2103

OESA-2026-2104

OPENSUSE-SU-2026:10614-1

SUSE-SU-2026:1571-1

USN-8192-1

USN-8192-2

Affected Products

Linuxmint

Ntfs-3G

Ubuntu

References · 37

• https://osv.dev/vulnerability/USN-8192-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8192-2 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2100 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1571-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-40706 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2102 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2101 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8192-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-40706 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2026-40706 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40706 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2103 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8192-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52890 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10614-1 · Vendor Advisory