CVE-2026-99241

In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite() ntfs_filemap_page_mkwrite() calls iomap_page_mkwrite() without holding mapping->invalidate_lock, so a concurrent truncate or fallocate can be in the middle of invalidating pagecache and rewriting the runlist while the write fault maps blocks and dirties the folio. This races with ntfs_attr_fallocate(), which merges clusters into the in-memory runlist, drops the runlist lock, and only afterwards zeroes the newly allocated clusters on disk; and with the punch-hole/insert/collapse paths that free clusters after truncating the cache. Per Documentation/filesystems/locking.rst, ->page_mkwrite() must ensure there are no truncate/invalidate races, "usually mapping->invalidate_lock is suitable for proper serialization". xfs takes its mmaplock (= the invalidate_lock rwsem) shared in exactly this path. Take invalidate_lock shared around iomap_page_mkwrite(). The read-only fault path is already covered because filemap_fault() itself grabs invalidate_lock shared on instantiation/read paths; only page_mkwrite was bypassing it in this driver.

• https://git.kernel.org/stable/c/0fecc393f2060e6bc25138df32cb923ec7071c6b
• https://git.kernel.org/stable/c/57c0d5281666d150c73e56e6795a4eef3ede8693

Published

Nov 2, 2026

Last Modified

Nov 2, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-99236In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-99237In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-99238In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-99239In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-9924Heap buffer overflow in ANGLE in Google Chrome on Windows pr…8.3
• CVE-2026-99240In the Linux kernel, the following vulnerability has been re…
• CVE-2026-99242In the Linux kernel, the following vulnerability has been re…
• CVE-2026-99243Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-99244In the Linux kernel, the following vulnerability has been re…
• CVE-2026-99245In the Linux kernel, the following vulnerability has been re…
• CVE-2026-99246In the Linux kernel, the following vulnerability has been re…8.1
• CVE-2026-99247In the Linux kernel, the following vulnerability has been re…