What is GHSA-f7v2-w5q3-wjf8?

GHSA-f7v2-w5q3-wjf8 is a security advisory published by GitHub Security Advisories with unknown severity. In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag...

Which CVE IDs does GHSA-f7v2-w5q3-wjf8 cover?

GHSA-f7v2-w5q3-wjf8 covers the following CVE IDs: CVE-2026-98133. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-f7v2-w5q3-wjf8unknown

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag...

Vendor

GitHub Security Advisories

Published

September 25, 2026

Last Modified

September 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-98133 →

📋 Description

In the Linux kernel, the following vulnerability has been resolved:

ntfs: leave HasEA flag untouched on setxattr failure

In ntfs_set_ea(), the exit path unconditionally updates the HasEA flag based on ea_info_qsize. When an error occurs before ea_info_qsize is updated, NInoClearHasEA() hides existing on-disk EAs until the inode is evicted.

Only update the flag on success.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-98133
https://git.kernel.org/stable/c/5811a08310754cbf4a1122c81d14c54b8873c35c
https://git.kernel.org/stable/c/ac727d86fb84bdc9626ba9c756c26767459f3083
https://github.com/advisories/GHSA-f7v2-w5q3-wjf8