InjectionBunny is a privilege escalation vulnerability discovered in the Linux kernel's NTFS3 filesystem driver, exploiting SUID injection through a race condition or insufficient validation. The issue was reported on the ntfs3 mailing list, indicating it affects the out-of-tree NTFS3 driver that replaced the older ntfs module.
Background
NTFS3 is a Linux kernel driver for reading/writing NTFS filesystems, recently merged as a replacement for the older ntfs module. SUID injection vulnerabilities in filesystem drivers can allow unprivileged users to escalate to root by manipulating file ownership or permissions during mount operations.
- Source
- Lobsters
- Published
- Aug 22, 2026 at 11:25 PM
- Score
- 8.0 / 10