CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS ローカル権限昇格 CVE-2021-3493 の実動する概念実証コードです。これは、Ubuntu カーネルの OverlayFS 実装におけるローカル権限昇格の脆弱性です。 非特権ユーザーは、ユーザー名前空間内でオーバーレイファイルシステムをマウントし、setxattr を使用して任意のファイルケーパビリティを設定できます。カーネルはこれらのケーパビリティの名前空間の出所を検証しないため、init ユーザー名前空間 で有効になります — これにより、任意のローカルユーザーが root に権限昇格できます。...

CVE-2026-65330

CVE-2026-65330 — tmpfs setxattr PAC Bypass Component: XNU VFS — defaultsetxattrdoubleagent tmpfs VNOP Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Fixed PAC diversifier in xattr handler pointer signing Impact: PC control from kernel context; full privile...

DEBIAN-CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

UBUNTU-CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

CVE-2026-98133

The Linux kernel contains a vulnerability in the ntfs component within the ntfs_set_ea() function. The issue is caused by an exit path that unconditionally updates the HasEA flag based on ea_info_qsize. If an error occurs before ea_info_qsize is updated, NInoClearHasEA() may hide existing on-disk...

CVE-2026-98133 ntfs: leave HasEA flag untouched on setxattr failure

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

EUVD-2026-86964

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

CVE-2026-98133 ntfs: leave HasEA flag untouched on setxattr failure

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

Linux Distros Unpatched Vulnerability : CVE-2026-98133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path...

PT-2026-98795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ntfs set ea function where the exit path unconditionally updates the HasEA flag based on ea info qsize. If an error occurs before ea info qsize is updated, the...

DEBIAN-CVE-2026-90132

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

CVE-2026-90132

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

CVE-2026-90132

CVE-2026-90132 affects the Linux kernel's NTFS filesystem driver . An unprivileged local user can call setxattr on the reserved $LXUID, $LXGID, $LXMOD, and $LXDEV extended attributes without holding CAP_SYS_ADMIN , allowing modification of file metadata (owner, group, modification time, device nu...

CVE-2026-90132 ntfs: reject unprivileged writes to reserved $LX* xattrs

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

CVE-2026-90132 ntfs: reject unprivileged writes to reserved $LX* xattrs

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

EUVD-2026-81725

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

CVE-2026-90132: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed an inode leak in ext4xattrinodecreate, which occurs on an error path. There is a issue when using setxattr with a fault injection: localhost fsck.ext4 -fn /dev/sda e2fsck 1.46.6-rc1 12-Sep-2022 Pass 1: Checking...