CVE-2026-99131

In the Linux kernel, the following vulnerability has been resolved: xfs: fix capability check in xfs An user reported a bug where he managed to evade group's quota by changing a file's gid to a different group id the same user belonged to, even though quotas were enforced on both gids and the...

CVE-2026-99131 xfs: fix capability check in xfs

In the Linux kernel, the following vulnerability has been resolved: xfs: fix capability check in xfs An user reported a bug where he managed to evade group's quota by changing a file's gid to a different group id the same user belonged to, even though quotas were enforced on both gids and the...

CVE-2026-99131

The Linux kernel XFS filesystem component contains a vulnerability where users can bypass group quota accounting . The root cause is a semantic mismatch between capable() and has_capability_noaudit() functions; specifically, using the latter allowed users to evade quotas when changing a file's gr...