CVE-2021-46790: ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2.

Security readout for executives and security teams

CVE-2021-46790 is a heap buffer overflow in ntfsck, a deprecated NTFS-3G utility still shipped by some Linux distributions. Business risk is mainly systems or workflows that process NTFS disks or images from untrusted sources. The provided sources do not show active exploitation or a CVSS score. Exposure is most plausible on Linux systems with NTFS-3G packages that include ntfsck, especially forensic, recovery, endpoint, or admin workflows that check NTFS media or disk images. Systems without ntfsck installed or without NTFS checking workflows have lower practical exposure. Treat this as targeted operational risk, not an internet-wide emergency. Prioritize patching systems that handle removable media, disk images, recovery work, or forensic workflows. If those workflows are absent, handle through normal Linux package maintenance. Mitigation focus: Update NTFS-3G packages using the relevant Linux distribution security advisory.; Check Debian DSA-5160 if managing Debian-based systems.; Check the listed Fedora package advisories for Fedora deployments..

Prepared

Jun 2, 2026, 10:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.