{"id":"CVE-2026-90132","published":"2026-09-17T17:17:05.733","lastModified":"2026-09-18T18:17:43.013","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nntfs: reject unprivileged writes to reserved $LX* xattrs\n\nReject setxattr of the reserved $LXUID, $LXGID, $LXMOD and $LXDEV names\nfrom userspace unless the caller has CAP_SYS_ADMIN.","cvssScore":7.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/86f46508016bc1f2bffb3a52dc2664f942fb9802","tags":[]},{"url":"https://git.kernel.org/stable/c/ea6a67ef64451d2da298f15baa35865b4bb6372a","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}