CVE-2026-90131

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data race exists in the NTFS driver when handling resident iomap reads. The function ntfs read iomap begin resident() traverses the Master File Table (MFT) record via ntfs attr lookup() and ntfs attr find() without acquiring the ni->mrec lock. Simultaneously, other functions such as ntfs attr record resize(), ntfs make room for attr(), and ntfs resident attr record add() may modify the same base ni->mrec buffer while holding that lock. This allows a reader to observe inconsistent or torn attribute length and offset fields during record relocation, specifically affecting the mft record.bytes in use field. This race condition was identified between the mmap read fault path and the link() and unlink() operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.