Specially Crafted NTFS File-System Image Allows Root Access On Linux With NTFS3 Driver
Curated from Phoronix
If your infrastructure relies on Linux for automated storage processing, this vulnerability is a critical operational blind spot. The NTFS3 driver, now the default in many distributions, contains a logic flaw that permits privilege escalation when parsing maliciously formatted NTFS images. This is not a theoretical risk; it is a tangible threat to any system where untrusted media or network shares are mounted by non-privileged users. The delay in patching exacerbates the danger, as attackers can easily craft these payloads. For SREs, the immediate lesson is that mount options are not just performance tuning parameters; they are security controls. You must enforce read-only mounts or strict permission boundaries for any external storage to prevent local privilege escalation from becoming a system-wide compromise.
A reported security vulnerability for the NTFS3 driver has gone unaddressed since being reported earlier this summer. The vulnerability allows a pre-crafted NTFS image on a USB flash drive or similar to allow the user to gain root access to the running Linux system...
— Phoronix