Junglewise Threat Intelligence

CVE-2026-98133: In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfs_set_ea()

CVE-2026-98133 · Severity: info · Published 2026-09-25

Executive brief

In the Linux kernel, the following vulnerability has been resolved:

ntfs: leave HasEA flag untouched on setxattr failure

In ntfs_set_ea(), the exit path unconditionally updates the HasEA flag based on ea_info_qsize. When an error occurs before ea_info_qsize is updated, NInoClearHasEA() hides existing on-disk EAs until the inode is evicted.

Only update the flag on success.

References