> Debian DSA-6221-1 NTFS-3G Critical Buffer Overflow Privilege Escalation
[DATE: 21/04/2026 14:41]
[LANGUAGE: EN]
Andrea Bocchetti discovered a heap-based buffer overflow in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of this flaw for local root privilege escalation. For the oldstable distribution (bookworm), this problem has been fixed in version 1:2022.10.3-1+deb12u3.