CVE-2026-98141
Linux: ntfs: propagate reparse index insertion failure
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.14%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 9692b1b4fc00cf89628bc43f71729ab21f14f8d3LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
ntfs: propagate reparse index insertion failure
update_reparse_data() ignores the return value of set_reparse_index(). When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink(2) (and WSL special file creation) reports success while no reparse data exists on disk. When there was no previous reparse data (oldsize == 0), the failure was likewise silently ignored.
Propagate the error to the caller.
Text from CVE List
Affected versions 6
- Linuxaffected: fc053f05ca282a5e760b41f6560ac835c4e28037 before c62f446c63398dc7151f413069bf617032cf7a71CVE List
- Linuxaffected: fc053f05ca282a5e760b41f6560ac835c4e28037 before 9692b1b4fc00cf89628bc43f71729ab21f14f8d3CVE List
- Linuxaffected: 7.1CVE List
- Linuxunaffected: all versions before 7.1CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List