CVE-2026-98133 PUBLISHED

ntfs: leave HasEA flag untouched on setxattr failure

Assigner: Linux
Reserved: 25.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

ntfs: leave HasEA flag untouched on setxattr failure

In ntfs_set_ea(), the exit path unconditionally updates the HasEA flag based on ea_info_qsize. When an error occurs before ea_info_qsize is updated, NInoClearHasEA() hides existing on-disk EAs until the inode is evicted.

Only update the flag on success.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from fc053f05ca282a5e760b41f6560ac835c4e28037 to 5811a08310754cbf4a1122c81d14c54b8873c35c (excl.)
  • affected from fc053f05ca282a5e760b41f6560ac835c4e28037 to ac727d86fb84bdc9626ba9c756c26767459f3083 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 7.1 is affected
  • unaffected from 0 to 7.1 (excl.)
  • unaffected from 7.2.7 to 7.2.* (incl.)
  • unaffected from 7.3-rc2 to * (incl.)

References