NTFS-3G: Multiple Vulnerabilities — GLSA 202608-13

Multiple vulnerabilities have been found in NTFS-3G, the worst of which could result in privilege escalation.

Affected packages

sys-fs/ntfs3g on all architectures
Affected versions < 2026.7.7
Unaffected versions >= 2026.7.7

Background

NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems.

Description

Multiple vulnerabilities have been discovered in NTFS-3G. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All NTFS-3G users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-fs/ntfs3g-2026.7.7"
 

References

Release date
August 16, 2026

Latest revision
August 16, 2026: 1

Severity
high

Exploitable
local

Bugzilla entries