CVE-2026-99241

Published 2 November 2026 · tracked since 3 November 2026

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite() ntfs_filemap_page_mkwrite() calls iomap_page_mkwrite() without holding mapping->invalidate_lock, so a concurrent truncate or fallocate can be in the middle of invalidating

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-119736 HIGH 8.2
• CVE-2026-120057 HIGH 7.5
• CVE-2026-120058 HIGH 7.5
• CVE-2026-105603
• CVE-2026-105604
• CVE-2026-119301 HIGH 7.9
• CVE-2026-105769 CRITICAL 9.3
• CVE-2026-99242
• CVE-2026-99236 HIGH 7.8
• CVE-2026-99237 HIGH 7.8

→ Open the live CVE board · all tools