[ CVE-2026-98133 · Published 25 Sep 2026 ]
Vulnerability in Linux
CVSS 5.5
EPSS <1%1 agency advisoryFix available
[ Description ]Official description
In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfs_set_ea(), the exit path unconditionally updates the HasEA flag based on ea_info_qsize. When an error occurs before ea_info_qsize is updated, NInoClearHasEA() hides existing on-disk EAs until the inode is evicted. Only update the flag on success.
[ Fixes ]Fixes and patches
- Patch on git.kernel.orgVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
- Patch on git.kernel.orgVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-3579
Linux Kernel: Multiple vulnerabilities Translated from German