NTFS-3G CVE-2026-46570

Apply the vendor-released patch as documented in Ubuntu Security Notice USN-8554-1, available at https://ubuntu.com/security/notices/USN-8554-1. Ubuntu users should update their ntfs-3g package to the patched version via the standard package manager (apt-get update && apt-get upgrade ntfs-3g). An exact upstream fix version was not independently confirmed from the provided data beyond 'patch available from vendor.' For systems where an immediate patch cannot be applied, the primary compensating control is removing the SUID bit from the ntfs-3g binary (chmod u-s /usr/bin/ntfs-3g), which eliminates the privilege escalation path but restricts NTFS mounting to root-only; evaluate operational impact before applying this change. Alternatively, restricting access to the ntfs-3g binary to trusted users via group permissions reduces the attack surface without fully breaking functionality. Neither workaround addresses the underlying heap overflow - they only limit who can trigger it with elevated privileges.