CVE-2026-90134

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Compressed I/O paths in the NTFS driver incorrectly handle memory mapping by discarding the address returned by the kmap local page() function and subsequently accessing or unmapping the page via page address(). This behavior is invalid for highmem pages, which are memory regions located above the direct mapping limit of the kernel. Local mappings must be unmapped using the specific address returned by kmap local page() to ensure stability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.