CVE-2026-98880: Linux kernel · ntfs3: handle set_blocksize failures
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in df9dac4dbe557f6455a61e68cc09ef98b22f3686 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 12:55 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in df9dac4dbe557f6455a61e68cc09ef98b22f3686, c5b8a7ec9a0a71518915c82b8552be1ccbb88288, 78e10082f3e919b8863958feac5f269d3ade9469 +1
Exploitation evidence
Disclosed: evidence found.
CVE published 23 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to df9dac4dbe557f6455a61e68cc09ef98b22f3686, c5b8a7ec9a0a71518915c82b8552be1ccbb88288, 78e10082f3e919b8863958feac5f269d3ade9469 or 24f7d1824b7581ae3daf9d443c5dfeabd89df6d8.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A patch is available and has been applied in specific commits to the Linux kernel source. Users running Linux kernel version 5.15 should update to a fixed version containing these commits to remediate the issue. Since this is a kernel-level vulnerability, applying the official kernel update is the recommended mitigation.
Description
A vulnerability in the Linux kernel's ntfs3 driver related to improper handling of set_blocksize failures has been resolved. The issue arises because ntfs3 uses buffer_heads, which do not handle block sizes larger than PAGE_SIZE correctly, leading to a kernel BUG_ON during mounting. This bug triggers in folio_set_bh on the first __bread_gfp call. The vulnerability affects Linux kernel version 5.15 and has been fixed in specific commits.
References
- git.kernel.org/stable/c/df9dac4dbe557f6455a61e68cc09ef98b22f3686 (opens in a new tab)
- git.kernel.org/stable/c/c5b8a7ec9a0a71518915c82b8552be1ccbb88288 (opens in a new tab)
- git.kernel.org/stable/c/78e10082f3e919b8863958feac5f269d3ade9469 (opens in a new tab)
- git.kernel.org/stable/c/24f7d1824b7581ae3daf9d443c5dfeabd89df6d8 (opens in a new tab)