SB2026092850 - Unchecked Return Value in Linux kernel ntfs

Description

This security bulletin contains information about 1 vulnerability.

1) Unchecked Return Value (CVE-ID: CVE-2026-98141)

CWE-ID: CWE-252 - Unchecked Return Value

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause symlink or WSL special-file creation to be reported as successful without reparse data being stored.

The vulnerability exists due to unchecked return value handling in update_reparse_data() in the NTFS reparse handling code when reparse index insertion fails during symlink or WSL special-file creation. A local user can invoke symlink(2) or create a WSL special file to cause symlink or WSL special-file creation to be reported as successful without reparse data being stored.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/9692b1b4fc00cf89628bc43f71729ab21f14f8d3
• https://git.kernel.org/stable/c/c62f446c63398dc7151f413069bf617032cf7a71