-
CVE-2026-98140
- EPSS 0.15%
- Veröffentlicht 25.09.2026 10:36:16
- Zuletzt bearbeitet 30.09.2026 14:10:59
- Erkennungen
ntfs: fix kmap_local leak in write_mft_record_nolock() error paths
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths write_mft_record_nolock() maps the MFT record folio with kmap_local_folio(), but the pre_write_mst_fixup() and bio_add_folio() failure paths jump to the error label without unmapping it. kmap_local mappings are stack-ordered per task, so leaking one corrupts the nesting for any outer mapping. Unmap the folio on those error paths too.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
115380f9a2f9675c7924563cbba70d40cae8fb81
Version <
5d7f7bf8fba8cf563b42b44aa4ab3d9928ac480c
Status
affected
Version
115380f9a2f9675c7924563cbba70d40cae8fb81
Version <
cf06dcd572845723821b54a608fc2da995c3c8e2
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
7.1
Status
affected
Version
0
Version <
7.1
Status
unaffected
Version <=
7.2.*
Version
7.2.7
Status
unaffected
Version <=
*
Version
7.3-rc2
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.031 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/5d7f7bf8fba8cf563b42b44aa4ab3d9928ac480c
https://git.kernel.org/stable/c/cf06dcd572845723821b54a608fc2da995c3c8e2