AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2026-40706.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSHIGH / 8.4No severity score in this snapshot.
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSMicrosoft vendor recordModified Sep 24, 2026

Disclosure summary

In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered on the READ path (stat, readdir, open) when processing a security descriptor with multiple ACCESS_DENIED ACEs containing WRITE_OWNER from distinct group SIDs.

Source-reported weakness categories

CWE-122

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

Microsoft Security Updates (CVRF) · 2026-Apr

Open original source · Updated Sep 24, 2026

In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered on the READ path (stat, readdir, open) when processing a security descriptor with multiple ACCESS_DENIED ACEs containing WRITE_OWNER from distinct group SIDs.

Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.

Microsoft maximum product score: 8.4

VendorProduct / associationVersion / bounds
Microsoft update guideazl3 ntfs-3g 2022.10.3-2 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guidecbl2 ntfs-3g 2022.10.3-2 on CBL Mariner 2.0 (MSRC status code 3)
Microsoft update guidecbl2 ntfs-3g 2022.10.3-2 on CBL-Mariner 2.0 (MSRC status code 3)

Vendor remediation references

  • CBL-Mariner Releases · build 2022.10.3-3 · product IDs 18117-17084, 20129-17086
  • Vendor guidance · product IDs 18117-17084, 20129-17086
  • Release Notes · build 2022.10.3-3 · product IDs 20129-21692
  • Vendor guidance · product IDs 20129-21692

Original records & references

PUBLISHED 2026-04-22T21:03:37-04:00
MODIFIED 2026-09-24T22:16:37-04:00
INGESTED 2026-10-08T12:45:03-04:00