CVE-2026-98133
Received Received - Intake

NTFS HasEA Flag Update Issue in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfs_set_ea(), the exit path unconditionally updates the HasEA flag based on ea_info_qsize. When an error occurs before ea_info_qsize is updated, NInoClearHasEA() hides existing on-disk EAs until the inode is evicted. Only update the flag on success.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98133
EUVD
EUVD-2026-86964

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the NTFS file system. When setting extended attributes (xattrs) on a file, the system incorrectly updates a flag called HasEA even if the operation fails. This can hide existing extended attributes on disk until the file's inode is evicted from memory.

Impact Analysis

If you use NTFS on Linux and rely on extended attributes for file metadata or access control, this bug could cause data corruption or security issues. Applications expecting to read existing attributes might fail, leading to unexpected behavior or security bypasses.

Mitigation Strategies

Update the Linux kernel to a patched version where ntfs_set_ea() correctly handles the HasEA flag. Monitor for ntfs-related errors in system logs that may indicate EA handling issues.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98133. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart