CVE-2026-99241
Description
A flaw was found in the Linux kernel's NTFS file system driver. A local user can cause a Denial of Service (DoS) or file system corruption by exploiting a race condition between concurrent memory-mapped write operations and file truncation or allocation. Because the driver omits proper synchronization locks when handling write page faults, concurrent operations can invalidate memory mappings prematurely and lead to a system crash.
Statement
This vulnerability is rated as Moderate impact because exploitation requires local access and write permissions on an active NTFS mount, and the resulting impact is confined to a local denial of service or filesystem corruption without code execution. In typical Red Hat Enterprise Linux deployments, NTFS is neither mounted by default nor used for system partitions, significantly restricting exposure. An attacker must execute carefully timed concurrent memory-mapped writes and file allocation or truncation calls on an existing NTFS filesystem to trigger the race.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Understanding the Weakness (CWE)
Integrity,Other
Technical Impact: Alter Execution Logic; Unexpected State
The main problem is that -- if a lock is overcome -- data could be altered in a bad state.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
