File Handling Vulnerability in Linux Kernel's NTFS by Microsoft

CVE-2026-99241

What is CVE-2026-99241?

A race condition exists in the NTFS file handling of the Linux kernel, where the function ntfs_filemap_page_mkwrite() can execute without holding the necessary invalidate_lock. This oversight allows concurrent operations, such as truncate or fallocate, to interfere with page cache management while write operations are in progress, potentially leading to data inconsistency. The solution requires the acquisition of the invalidate_lock during iomap_page_mkwrite() execution to ensure proper serialization of write and invalidate processes, thus safeguarding the integrity of file operations.

References