Memory Leak Vulnerability in Linux Kernel for NTFS Managed by Canonical

CVE-2026-98140

What is CVE-2026-98140?

The Linux kernel has a significant vulnerability where the function write_mft_record_nolock() can lead to a memory leak during error handling paths. This issue arises when kmap_local_folio() is used to map the Master File Table (MFT) record, but the code fails to unmap the folio in certain failure scenarios, thereby corrupting the mapping order for other tasks. By addressing these error paths and ensuring the folio is appropriately unmapped, this issue has been resolved, thereby enhancing the overall stability and security of the NTFS file system.

References