CVE-2026-56135 @ Helios
Status
new
Priority
1.11
Match score
4.0
Risk
MemCorrupt
priv:root
CVSS
7.4 HIGH
Reason
cpe: ntfs-3g; pkgs: ntfs-3g; version: in-range: ntfs-3g-2017.3.23AR.3-4+deb11u5; debian:bullseye ntfs-3g open; risk:memory_corruption
Created
2026-10-15T10:20:31Z
Updated
2026-10-20T10:18:41Z
Package interrogation (copy)
Run on the host — click to copy a command. Debian/apt
| Package | Commands |
|---|---|
| ntfs-3g-2017.3.23AR.3-4+deb11u5 | |
| ntfs-3g | |
| libntfs-3g883-1:2017.3.23AR.3-4+deb11u5 | |
| ntfs-3g-1:2017.3.23AR.3-4+deb11u5 |
Inventory lookup
Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.
| System | Matches | Ticket for CVE-2026-56135 | |
|---|---|---|---|
| Helios | libntfs-3g883 1:2017.3.23AR.3-4+deb11u5; ntfs-3g 1:2017.3.23AR.3-4+deb11u5 | new open |
Related CVE (same fix)
Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.
Host OS / kernel
OS
Debian GNU/Linux 11 (bullseye)
(11)
· debian
Arch
aarch64
kernel_release
uname -r → 6.1.21-v8+kernel_version
uname -v → #1642 SMP PREEMPT Mon Apr 3 17:24:16 BST 2023For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.
Description
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.
Update status
Add note only
References
NVD: CVE-2026-56135