CVE-2026-90132

A flaw was found in the Linux kernel's NTFS filesystem. This vulnerability allows an unprivileged local user to bypass intended access controls by modifying reserved extended attributes xattrs, such as $LXUID, $LXGID, $LXMOD, and $LXDEV, through the setxattr function. This unauthorized modificati...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...

CVE-2026-65330

CVE-2026-65330 — tmpfs setxattr PAC Bypass Component: XNU VFS — defaultsetxattrdoubleagent tmpfs VNOP Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Fixed PAC diversifier in xattr handler pointer signing Impact: PC control from kernel context; full privile...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed an inode leak in ext4xattrinodecreate, which occurs on an error path. There is a issue when using setxattr with a fault injection: localhost fsck.ext4 -fn /dev/sda e2fsck 1.46.6-rc1 12-Sep-2022 Pass 1: Checking...

DEBIAN-CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

UBUNTU-CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

CVE-2026-98133 ntfs: leave HasEA flag untouched on setxattr failure

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

CVE-2026-98133 ntfs: leave HasEA flag untouched on setxattr failure

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

EUVD-2026-86964

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

CVE-2026-98133

A flaw exists in the Linux kernel 's NTFS file system implementation within the ntfs_set_ea() function. The vulnerability occurs because the exit path unconditionally updates the HasEA flag based on ea_info_qsize. If an error happens before ea_info_qsize is updated, the NInoClearHasEA() function ...

PT-2026-98795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ntfs set ea function where the exit path unconditionally updates the HasEA flag based on ea info qsize. If an error occurs before ea info qsize is updated, the...

CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

Linux Distros Unpatched Vulnerability : CVE-2026-98133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path...

DEBIAN-CVE-2026-90132

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

CVE-2026-90132

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

EUVD-2026-81725

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

CVE-2026-90132

CVE-2026-90132 affects the Linux kernel's NTFS filesystem driver . An unprivileged local user can call setxattr on the reserved $LXUID, $LXGID, $LXMOD, and $LXDEV extended attributes without holding CAP_SYS_ADMIN , allowing modification of file metadata (owner, group, modification time, device nu...

CVE-2026-90132 ntfs: reject unprivileged writes to reserved $LX* xattrs

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...

CVE-2026-90132 ntfs: reject unprivileged writes to reserved $LX* xattrs

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN...