Linux Distros Unpatched Vulnerability : CVE-2026-90117

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: validate usaofs before preserving the update sequence number When ntfsmftrecordalloc reuses a free mft record it reads the old update sequence number...

EUVD-2026-81710

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate usaofs before preserving the update sequence number When ntfsmftrecordalloc reuses a free mft record it reads the old update sequence number straight from the on-disk record: usn = le16 u8 m + le16tocpum-usaofs; He...

CVE-2026-90117 ntfs: validate usa_ofs before preserving the update sequence number

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate usaofs before preserving the update sequence number When ntfsmftrecordalloc reuses a free mft record it reads the old update sequence number straight from the on-disk record: usn = le16 u8 m + le16tocpum-usaofs; He...

CVE-2026-90117

CVE-2026-90117 affects the Linux kernel's NTFS filesystem driver . In ntfs_mft_record_alloc(), when reusing a free MFT record, the usa_ofs field is read directly from a raw $MFT page-cache folio without validation. Because MST fixup and record checking operate on private copies, usa_ofs remains a...