CVE-2026-90132: Security vulnerability
In the Linux kernel, the following vulnerability has been resolved:
ntfs: reject unprivileged writes to reserved $LX xattrs
Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAPSYSADMIN.
Event History
Frequently Asked Questions
Who can exploit this issue?
An unprivileged userspace caller that can invoke setxattr against NTFS filesystem objects is affected. The fix requires CAP_SYS_ADMIN to set the reserved $LXUID, $LXGID, $LXMOD, and $LXDEV xattr names.
What access does an attacker need?
The attacker needs local userspace access sufficient to attempt extended-attribute writes on an NTFS filesystem. The provided information does not indicate a remote attack path.
How can I tell whether a system is vulnerable?
A vulnerable system permits a caller without CAP_SYS_ADMIN to use setxattr to write one of the reserved $LXUID, $LXGID, $LXMOD, or $LXDEV attributes on NTFS. A fixed system rejects those writes unless the caller has CAP_SYS_ADMIN.