CVE-2026-90132

Published: Set 17, 2026 Last Modified: Set 18, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,1

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector: local

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: none

AI Translation Available

In the Linux kernel, the following vulnerability has been resolved:

ntfs: reject unprivileged writes to reserved $LX* xattrs

Reject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names
from userspace unless the caller has CAP_SYS_ADMIN.

https://git.kernel.org/stable/c/86f46508016bc1f2bffb3a52dc2664f942fb9802

https://git.kernel.org/stable/c/ea6a67ef64451d2da298f15baa35865b4bb6372a