CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

DSA-6389-1 ntfs-3g - security update

unknownCVE-2026-42616CVE-2026-42617CVE-2026-42618CVE-2026-46569CVE-2026-46570CVE-2026-46571
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege escalation. https://security-tracker.debian.org/tracker/DSA-6389-1

CSIRTS triage

vendor: NTFS-3Gproduct: ntfs-3gPrivilege escalation
What
Several vulnerabilities in NTFS-3G allow local users to escalate privileges.
Who is affected
Local users of NTFS-3G are affected.
Urgency
Remediation is urgent as these vulnerabilities can lead to local root privilege escalation, though exploitation is not confirmed.
Action
Update NTFS-3G to the latest version.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch ntfs-3g

Get an email when a new ntfs-3g advisory drops — max one per day, one-click unsubscribe.

Details

Source
Debian Security Advisories (INTL · vendor-psirt · site)
Severity
unknown
Published
2026-07-15
Exploitation
Not in CISA KEV at last sync

Original advisory: https://lists.debian.org/debian-security-announce/2026/msg00300.html

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-42616coverage & exploitation statusNVD · CVE.org
CVE-2026-42617coverage & exploitation statusNVD · CVE.org
CVE-2026-42618coverage & exploitation statusNVD · CVE.org
CVE-2026-46569coverage & exploitation statusNVD · CVE.org
CVE-2026-46570coverage & exploitation statusNVD · CVE.org
CVE-2026-46571coverage & exploitation statusNVD · CVE.org
CVE-2026-46572coverage & exploitation statusNVD · CVE.org
CVE-2026-56135coverage & exploitation statusNVD · CVE.org
CVE-2026-56136coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

More from Debian Security Advisories