Linux 7.4 Kernel Adds Native Support for NTFS Streams
The kernel update enables native access to Windows file streams and improves interoperability for multi-OS environments.
Updated on Oct. 27, 2026 in Cybersecurity
Live Poll
Should modern operating systems prioritize compatibility with legacy file system features?
The Linux 7.4 kernel introduces support for NTFS Alternate Data Streams (ADS) and new ioctl interfaces for file management. This update allows users to enumerate, read, write, and remove Windows-style file streams directly from the kernel driver.
Why it matters
By adding support for ADS, the Linux kernel improves interoperability for systems sharing data with Windows environments. This kernel update facilitates easier handling of files that utilize NTFS-specific metadata streams which were previously inaccessible.
The Linux 7.4 kernel introduces the streams_interface=windows mount option, enabling access to multiple $DATA attributes using the [file]:[stream-name] syntax. Additionally, the update enables FS_IOC_GETFLAGS and FS_IOC_SETFLAGS for file attribute updates and FS_IOC_GETFSUUID for volume serial numbers.
The players
Linux Kernel
An open-source monolithic operating system kernel that serves as the foundation for diverse computing environments.
The details
Alternate Data Streams (ADS) are a feature of the NTFS file system that allow files to contain multiple data streams, effectively hiding secondary content within a primary file. The kernel driver now employs new ioctl (input/output control) interfaces, which are system calls that allow user-space applications to communicate directly with hardware or drivers, to manage these streams. This includes mounting previously hibernated NTFS volumes, which are Windows partitions currently locked in a sleep state.
Timeline
Linux 7.1: The initial NTFS kernel driver was merged.
Linux 7.4: Support for Alternate Data Streams was added to the driver.
The Tech Race
This update moves the Linux kernel closer to full functional parity with the Windows NTFS specification. It follows the incremental integration path that began with the driver's introduction in version 7.1.
Users working in multi-OS environments can now mount and interact with hibernated NTFS volumes and access hidden streams natively. These features are available immediately for users who update to the Linux 7.4 kernel version.
The takeaway
This update bridges a long-standing functionality gap for developers who interact with Windows-formatted disks on Linux. Watch for future performance benchmarks comparing these native ioctl calls against existing FUSE-based user-space implementations.
Further reading
For more on evolving kernel security and file system interoperability, see our Cybersecurity section.
Source note: This article includes information reported by Phoronix.
Live Poll
Should modern operating systems prioritize compatibility with legacy file system features?
