NTFS3 Driver Vulnerability Allows Root Access on Linux from Crafted Image
A critical security vulnerability has been identified in the Linux kernel's NTFS3 driver, which could allow an attacker to gain root privileges on affected systems. The flaw, first reported earlier this summer and currently unaddressed, involves a specially crafted NTFS file-system image. When mounted from a source like a USB flash drive or other storage media, this malicious image can exploit the vulnerability to elevate user permissions, granting full root access to the running Linux system. The Phoronix report highlights the ongoing risk to users leveraging the NTFS3 driver for Windows file system compatibility.