CVE-2026-98133

A flaw was found in the Linux kernel's NTFS file system implementation. When an error occurs while setting an extended attribute (EA), the kernel prematurely clears the flag indicating that extended attributes are present. A local user can exploit this vulnerability by triggering a failed extended attribute update, causing existing on-disk extended attributes to become hidden and inaccessible until the file inode is evicted from memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.