All vulnerabilities
CVE-2026-98133

Linux: ntfs: leave HasEA flag untouched on setxattr failure

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.11%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in5811a08310754cbf4a1122c81d14c54b8873c35cFixed versionCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 5811a08310754cbf4a1122c81d14c54b8873c35cLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

ntfs: leave HasEA flag untouched on setxattr failure

In ntfs_set_ea(), the exit path unconditionally updates the HasEA flag based on ea_info_qsize. When an error occurs before ea_info_qsize is updated, NInoClearHasEA() hides existing on-disk EAs until the inode is evicted.

Only update the flag on success.

Text from CVE List

Affected versions 6

  • Linuxaffected: fc053f05ca282a5e760b41f6560ac835c4e28037 before 5811a08310754cbf4a1122c81d14c54b8873c35cCVE List
  • Linuxaffected: fc053f05ca282a5e760b41f6560ac835c4e28037 before ac727d86fb84bdc9626ba9c756c26767459f3083CVE List
  • Linuxaffected: 7.1CVE List
  • Linuxunaffected: all versions before 7.1CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 2