NTFS-3G FUSE 2026.2.25

NTFS-3G FUSE 2026.2.25

On April 21, the latest version of the NTFS-3G FUSE driver was released. This release primarily focuses on bug fixes.

What's new:

  • Fixing script code in the build script (bashism) that incorrectly used specific Bash commands where a universal standard should have been implemented;
  • Creating a new NTFS partition using the mkntfs utility is now defined with microsecond accuracy;
  • Fix for two cases related to handling null data (NULL) and system error messages (errno);
  • Correction of a critical error that occurred when working with special file types (such as Reparse Points: symbolic links, junction points, disk mount points, specific data from cloud storage, for example, OneDrive files that are in the cloud but visible in a folder);
  • Fix in free space calculations within the Master File Table (MFT);
  • Fixed an error with guide page installation from extras when the extras themselves are not installed;
  • Fix for some use-after-free memory issues in the library and tools;
  • Corrected a typo in the NTFS hibernation message (thanks to Anil Kumar for reporting/fixing);
  • Escaping commas in the filesystem name when using libfuse version 2.8 or higher;
  • Change in the ntfsclone utility. The ability to adjust the sector size in the NTFS boot sector for the target device during image recovery has been granted;
  • Removed dependency on libdl (Dynamic Link Library) when building without external plugins. If plugins are disabled, the dependency on libdl is completely removed;
  • The ntfsinfo utility now allows displaying information about the log file’s state when unloading metadata;
  • Fixed the display of overflowing directories or indexes in the ntfsinfo utility;
  • Additionally, the display of the security descriptor list has been fixed in the ntfsinfo utility;
  • Corrected heap buffer overflow when POSIX access control lists are enabled ( CVE-2026-40706). Thanks to Andrea Bocchetti for this report;
  • The ntfsusermap utility fixed an overflow when generating backup file names.
  • Correction of two TOCTOU (Time-of-Check to Time-of-Use) vulnerabilities, a specific logical error related to concurrency and security;
  • Missing checks for returned values from malloc/sscanf have been fixed.

For reference. NTFS-3G is a free NTFS file system driver. The project is stable when working with any NTFS partitions (including writing) and has a large and active developer community, licensed under the GNU General Public License. However, for Mac OS X, the driver is not free, and a license purchase is required. Currently claimed compatibility includes the following operating systems: Linux (builds available for both 32-bit and 64-bit processors), FreeBSD, NetBSD, Solaris, Mac OS X, BeOS, and Haiku. Development was initiated by Szabolcs Szakaic in July 2006, with the first release on February 21, 2007 — version 1.0. Additional details can be found on the Wikipedia page and on the project page.

From the translator (me). Microsecond registration now broadens the following range of capabilities:

  • Forensic Analysis: For security professionals, microsecond accuracy allows for a more detailed reconstruction of the timeline of events on the disk;
  • Identification and Uniqueness: The more accurately the creation time is specified, the less likely it is for two different disks formatted in the same second to have identical timestamps. This helps system services uniquely identify volumes.
  • Compatibility with Windows: The native Windows formatting utility fills in this data as accurately as possible. This change makes mkntfs more 'correct' and indistinguishable from Microsoft tools.

Source: linux.org.ru

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster