PT-2026-60534 · Ntfs-3G · Ntfs-3G

CVE-2026-56135 · Published 2026-07-15 · Updated 2026-07-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25

Description A heap-based buffer overflow occurs in the build inherited id() function within libntfs-3g/security.c. An attacker can corrupt heap memory in the SUID-root ntfs-3g binary by creating a file within a specially crafted directory on a malicious NTFS image.

Recommendations Update to version 2026.2.25 or later.

Related Identifiers

CVE-2026-56135

OPENSUSE-SU-2026:11320-1

USN-8554-1

Affected Products

Ntfs-3G

References · 23

• https://osv.dev/vulnerability/USN-8554-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11320-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46571 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8554-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46572 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42618 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-56136 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-56135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42617 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-56135 · Security Note
• https://ubuntu.com/security/CVE-2026-46569 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46570 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-56135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42616 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-46569 · Note