CVE-2026-98139

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NTFS driver where the ntfs cluster free from rl nolock() function incorrectly increments the nr freed counter even when ntfs bitmap clear run() fails. This occurs because the function adds the run length to the counter whenever the error bookkeeping condition is false, regardless of whether the bitmap clear operation actually succeeded. Because a failed ntfs bitmap clear run() rolls back its partial modifications, no bits are actually cleared, but the vol->free clusters variable is still inflated. This leads to the corruption of statfs output and the allocator's free space gate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.