CVE-2026-98133

Summary

In the Linux kernel, the following vulnerability has been resolved:

ntfs: leave HasEA flag untouched on setxattr failure

In ntfs_set_ea(), the exit path unconditionally updates the HasEA flag based on ea_info_qsize. When an error occurs before ea_info_qsize is updated, NInoClearHasEA() hides existing on-disk EAs until the inode is evicted.

Only update the flag on success.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxfc053f05ca282a5e760b41f6560ac835c4e28037 < 5811a08310754cbf4a1122c81d14c54b8873c35caffected
LinuxLinuxfc053f05ca282a5e760b41f6560ac835c4e28037 < ac727d86fb84bdc9626ba9c756c26767459f3083affected
LinuxLinux7.1affected
LinuxLinux0 < 7.1unaffected
LinuxLinux7.2.7 <= 7.2.*unaffected
LinuxLinux7.3-rc2 <= *unaffected

Weaknesses

References