What is GHSA-fwfw-gmx6-hm94?

GHSA-fwfw-gmx6-hm94 is a security advisory published by GitHub Security Advisories with High severity. In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged...

Which CVE IDs does GHSA-fwfw-gmx6-hm94 cover?

GHSA-fwfw-gmx6-hm94 covers the following CVE IDs: CVE-2026-90132. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fwfw-gmx6-hm94?

GHSA-fwfw-gmx6-hm94 has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

GHSA-fwfw-gmx6-hm94HighCVSS 7.1

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged...

Vendor

GitHub Security Advisories

Published

September 17, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-90132 →

📋 Description

In the Linux kernel, the following vulnerability has been resolved:

ntfs: reject unprivileged writes to reserved $LX* xattrs

Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names from userspace unless the caller has CAP_SYS_ADMIN.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-90132
https://git.kernel.org/stable/c/86f46508016bc1f2bffb3a52dc2664f942fb9802
https://git.kernel.org/stable/c/ea6a67ef64451d2da298f15baa35865b4bb6372a
https://github.com/advisories/GHSA-fwfw-gmx6-hm94