CVE-2026-98137

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS driver where the ntfs dio zero range() function fails to correctly handle errors from blkdev issue zeroout(). Because the failure check in ntfs attr fallocate() did not account for nonzero return values, failed zeroing operations were silently ignored. This allowed the system to continue allocating clusters and potentially succeed in write operations, which could leave stale on-disk data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.