Linux Kernel NTFS Vulnerability – Volume Management Issue

CVE-2026-98138

What is CVE-2026-98138?

A vulnerability in the Linux kernel's NTFS driver allows for improper handling of volume status during the sync process. Specifically, when errors are encountered on an NTFS volume, the system incorrectly clears the 'dirty bit' — which is intended to indicate volume integrity issues. This flaw can lead to a situation where a volume that has recorded errors is mistakenly marked as clean, thereby preventing necessary recovery procedures. The change implemented ensures that the 'dirty bit' remains set when volume errors are present, thereby enhancing data integrity management and ensuring volumes requiring recovery are appropriately flagged.

References