Linux Kernel CVE-2026-72207

Vendor-released patch: update to Linux kernel 7.1.5 (stable) or 7.2-rc1 or later, which include commits 0aad21570197 and ceb49c372501; consumers of a distribution kernel should apply the vendor backport that references CVE-2026-72207. Apply the corresponding stable commits from git.kernel.org if maintaining a custom tree. As a compensating control until patched, avoid using the in-kernel NTFS3 driver for writable NTFS mounts on affected systems - mount NTFS volumes read-only (which prevents the attribute-resize path from executing, at the cost of losing write capability), or restrict which users/processes can mount and write to NTFS filesystems. Because the impact is on-disk corruption flagged by fsck, also run an NTFS consistency check/repair on volumes that were written by a vulnerable kernel to detect any 0-byte non-resident $DATA attributes already created. Reference the kernel.org commit links above for exact code changes.