CVE-2026-98141

Awaiting Analysis Awaiting Analysis - Queue

NTFS Reparse Index Insertion Failure in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-30

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the return value of set_reparse_index(). When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink(2) (and WSL special file creation) reports success while no reparse data exists on disk. When there was no previous reparse data (oldsize == 0), the failure was likewise silently ignored. Propagate the error to the caller.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-09-30

Generated

2026-10-15

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-98141

EUVD

EUVD-2026-86972

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the NTFS file system. When creating a reparse point (like a symlink), the system fails to properly handle errors during index insertion. The function update_reparse_data() ignores failures from set_reparse_index(), leading to a situation where the operation appears successful but no reparse data is actually written to disk. This can cause inconsistencies in file system operations.

Detection Guidance

This vulnerability is specific to the Linux kernel's NTFS implementation and does not provide direct detection commands. It involves a failure in reparse index insertion during symlink or WSL file creation. Monitoring kernel logs for NTFS-related errors or failed symlink operations may help detect issues. Check for filesystem corruption or missing reparse data on NTFS volumes.

Impact Analysis

This vulnerability may cause applications relying on reparse points (symlinks, WSL special files) to behave unexpectedly. Files may appear to be created or modified correctly, but critical metadata could be missing, leading to data corruption or application failures. Users might experience crashes or incorrect file system behavior.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to reparse data handling in NTFS, which could lead to data integrity problems but does not inherently violate regulatory requirements.

Mitigation Strategies

Apply the latest Linux kernel patches to address the ntfs reparse index insertion failure. Monitor vendor advisories for updates and test patches in a non-production environment before deployment.

Hi! I’m here to help you understand CVE-2026-98141. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70