CVE-2026-98141

In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the return value of set_reparse_index(). When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink(2) (and WSL special file creation) reports success while no reparse data exists on disk. When there was no previous reparse data (oldsize == 0), the failure was likewise silently ignored. Propagate the error to the caller.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/9692b1b4fc00cf89628bc43f71729ab21f14f8d3	Patch
https://git.kernel.org/stable/c/c62f446c63398dc7151f413069bf617032cf7a71	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:7.3:rc1::::::

History

27 Oct 2026, 18:15

Type	Values Removed	Values Added
CPE		cpe:2.3:o:linux:linux_kernel:7.3:rc1:::::: cpe:2.3:o:linux:linux_kernel::::::::
CWE		CWE-252
First Time		Linux linux Kernel Linux
References	~~() https://git.kernel.org/stable/c/9692b1b4fc00cf89628bc43f71729ab21f14f8d3 -~~	() https://git.kernel.org/stable/c/9692b1b4fc00cf89628bc43f71729ab21f14f8d3 - Patch
References	~~() https://git.kernel.org/stable/c/c62f446c63398dc7151f413069bf617032cf7a71 -~~	() https://git.kernel.org/stable/c/c62f446c63398dc7151f413069bf617032cf7a71 - Patch
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5

25 Sep 2026, 11:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-25 11:17

Updated : 2026-10-27 18:15

NVD link : CVE-2026-98141

Mitre link : CVE-2026-98141

CVE.ORG link : CVE-2026-98141

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-252

Unchecked Return Value

{"id": "CVE-2026-98141", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "fc053f05ca282a5e760b41f6560ac835c4e28037", "lessThan": "c62f446c63398dc7151f413069bf617032cf7a71", "versionType": "git"}, {"status": "affected", "version": "fc053f05ca282a5e760b41f6560ac835c4e28037", "lessThan": "9692b1b4fc00cf89628bc43f71729ab21f14f8d3", "versionType": "git"}], "programFiles": ["fs/ntfs/reparse.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "7.1"}, {"status": "unaffected", "version": "0", "lessThan": "7.1", "versionType": "semver"}, {"status": "unaffected", "version": "7.2.7", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ntfs/reparse.c"], "defaultStatus": "affected"}]}], "published": "2026-09-25T11:17:45.603", "references": [{"url": "https://git.kernel.org/stable/c/9692b1b4fc00cf89628bc43f71729ab21f14f8d3", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c62f446c63398dc7151f413069bf617032cf7a71", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-252"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs: propagate reparse index insertion failure\n\nupdate_reparse_data() ignores the return value of\nset_reparse_index(). When index insertion fails, the code removes\nthe just-written reparse data as cleanup but still returns 0, so\nsymlink(2) (and WSL special file creation) reports success while\nno reparse data exists on disk. When there was no previous reparse\ndata (oldsize == 0), the failure was likewise silently ignored.\n\nPropagate the error to the caller."}], "lastModified": "2026-10-27T18:15:14.930", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14D603E7-156F-4FD7-926F-F8D893FBAD60", "versionEndExcluding": "7.2.7", "versionStartIncluding": "7.1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.3:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11E35E1B-5DB4-4AB9-9706-CD73B799EADF"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}