OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90132

HIGH · CVSS 7.1 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel, specifically the NTFS file system, where unprivileged users can potentially write to reserved extended attributes ($LXUID, $LXGID, $LXMOD, and $LXDEV). This could lead to unauthorized changes in file ownership and permissions, compromising system integrity. System administrators and organizations utilizing Linux systems with NTFS support should prioritize addressing this issue to mitigate potential security risks.

CVE
CVE-2026-90132
Severity
HIGH
CVSS
7.1
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX* xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAP_SYS_ADMIN.