CVE Explorer

CVE-2026-43245

In the Linux kernel, the following vulnerability has been resolved: ntfs: ->d_compare() must not block ... so don't use __getname() there. Switch it (and ntfs_d_hash(), while we are at it) to kmalloc(PATH_MAX, GFP_NOWAIT). Yes, ntfs_d_hash() almost certainly can do with smaller allocations, but let ntfs folks deal with that - keep the allocation size as-is for now. Stop abusing names_cachep in ntfs, period - various uses of that thing in there have nothing to do with pathnames; just use k[m

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:df9cac3d82c8b696e692812bef3fa359cfc4a55c45c7581f8ebd805c76b624ae

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ntfs3/dir.c","fs/ntfs3/fsntfs.c","fs/ntfs3/inode.c","fs/ntfs3/namei.c","fs/ntfs3/xattr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"02ecc0978c459fd90bb24b2a946dd16d43e68fe5","status":"affected","version":"a3a956c78efaa202b1d75190136671cf6e87bfbe","versionType":"git"},{"lessThan":"1be7ca86ce1794d966fda5d82181bc978b150fbc","status":"affected","version":"a3a956c78efaa202b1d75190136671cf6e87bfbe","versionType":"git"},{"lessThan":"142c444a395f4d26055c8a4473e…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/ntfs3/dir.c","fs/ntfs3/fsntfs.c","fs/ntfs3/inode.c","fs/ntfs3/namei.c","fs/ntfs3/xattr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.141","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.91","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/metrics/0/cvssV3_1

Source references

5 source assertions

{"url":"https://git.kernel.org/stable/c/02ecc0978c459fd90bb24b2a946dd16d43e68fe5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/142c444a395f4d26055c8a4473e228bb86283f1e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/1be7ca86ce1794d966fda5d82181bc978b150fbc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/ca2a04e84af79596e5cd9cfe697d5122ec39c8ce"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/fb4b1f969ba01fa1d4088467a02fc1e5f0806710"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:29b02c96b59cb33e1ab8378f847885399a49a5aa7da926c6f4a57a08a15048d0 · sha256:ee302e794c0dd5e4… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer