Junglewise Threat Intelligence

CVE-2026-98140: In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths wri

CVE-2026-98140 · Severity: info · Published 2026-09-25

Executive brief

In the Linux kernel, the following vulnerability has been resolved:

ntfs: fix kmap_local leak in write_mft_record_nolock() error paths

write_mft_record_nolock() maps the MFT record folio with kmap_local_folio(), but the pre_write_mst_fixup() and bio_add_folio() failure paths jump to the error label without unmapping it. kmap_local mappings are stack-ordered per task, so leaking one corrupts the nesting for any outer mapping.

Unmap the folio on those error paths too.

References