-

CVE-2026-98137

ntfs: treat any nonzero dio zero-range return as an error

In the Linux kernel, the following vulnerability has been resolved:

ntfs: treat any nonzero dio zero-range return as an error

ntfs_dio_zero_range() returns either 0 or a negative errno from
blkdev_issue_zeroout(); it never returns a positive value.  The
zeroing failure check in ntfs_attr_fallocate() therefore never fired,
so a failed zeroing operation was silently ignored: the loop kept
going, the newly allocated clusters were folded into initialized_size
and the write could succeed leaving stale on-disk data.

Treat any nonzero return as an error and abort the allocation.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 495e90fa334828d4119061e2726af51d0a0fb4ed
Version < 56392b0d5290ff2b05fc673bc07803b8ae4cfd1b
Status affected
Version 495e90fa334828d4119061e2726af51d0a0fb4ed
Version < 607a9478833db656e7ceac8e9e382fa4acfde545
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.1
Status affected
Version 0
Version < 7.1
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.032
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/56392b0d5290ff2b05fc673bc07803b8ae4cfd1b
https://git.kernel.org/stable/c/607a9478833db656e7ceac8e9e382fa4acfde545