CVE-2026-72184

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ntfs: fix hole runlist memory leak in insert range error path

ntfs_non_resident_attr_insert_range() allocates hole_rl before mapping the

whole runlist. If ntfs_attr_map_whole_runlist() fails, the error path drops

ni->runlist.lock and returns without freeing hole_rl. This leaks memory

of sizeof(*hole_rl) * 2 bytes.

Fix this memory leak by freeing hole_rl before returning from

that error path, matching the later error paths in the same function.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References