Multiple vulnerabilities in NTFS-3G, including a high-severity flaw (CVE-2026-40706, CVSS 8.4), could lead to local privilege escalation. All versions prior to 2026.7.7 are affected, and users must upgrade to NTFS-3G version 2026.7.7 to mitigate the risks, as no workaround is currently available.
Multiple vulnerabilities have been found in NTFS-3G, the worst of which could result in privilege escalation. Affected packages Package sys-fs/ntfs3g on all architectures Affected versions < 2026.7.7 Unaffected versions >= 2026.7.7 Background NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems. Description Multiple vulnerabilities have been discovered in NTFS-3G. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this time. Resolution All NTFS-3G users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-fs/ntfs3g-2026.7.7" References CVE-2026-40706 CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46570 CVE-2026-46571 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 Release date August 16, 2026 Latest revision August 16, 2026: 1 Severity high Exploitable local Bugzilla entries 973067 979306