-
CVE-2026-98138
- EPSS 0.15%
- Veröffentlicht 25.09.2026 10:36:15
- Zuletzt bearbeitet 30.09.2026 14:10:59
- Erkennungen
ntfs: do not mark the volume clean in sync_fs when errors were recorded
In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in sync_fs when errors were recorded ntfs_put_super() and the remount-read-only path both clear the dirty bit only when NVolErrors(vol) is false. ntfs_sync_fs() clears it unconditionally, so any sync() on a volume that recorded an error marks that volume clean. A volume without this set is then seen as not needing recovery and it does not run one, so whatever went wrong is never repaired. This change skips resetting the dirty bit when there are volume errors. Reproduced on a volume whose $MFTMirr does not match $MFT, which sets the error flag while leaving the mount read-write: after a write and a sync, the on-disk volume flags read 0x0000 with this driver and 0x0001 with the guard in place.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
6251f0b0de7d645e3591931ca4c11d8322c1866f
Version <
ca1f9933eff777a604eb664d0f9ae433b8664cbf
Status
affected
Version
6251f0b0de7d645e3591931ca4c11d8322c1866f
Version <
0e4c839905418d55bafe571a92533a1d1ac7b0a8
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
7.1
Status
affected
Version
0
Version <
7.1
Status
unaffected
Version <=
7.2.*
Version
7.2.7
Status
unaffected
Version <=
*
Version
7.3-rc2
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.031 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/ca1f9933eff777a604eb664d0f9ae433b8664cbf
https://git.kernel.org/stable/c/0e4c839905418d55bafe571a92533a1d1ac7b0a8