Get real-time updates on Telegram
CVE-2026-90199: Linux 6.6
CVE-2026-90199. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00174 (percentile 0.06403), scored 17-Oct-2026.
Affected technology
Linux · 013ff63b649475f0ee134e2c8d0c8e65284ede50 to before 0441e34ce098c19185a7b52c5b8b89a8a5b26888, 013ff63b649475f0ee134e2c8d0c8e65284ede50 to before 7ab69cef49ebdfee288287d62641b24ab1445ecc, 013ff63b649475f0ee134e2c8d0c8e65284ede50 to before ce9a619c432b9a4044fee115c5483fbed946c131, 013ff63b649475f0ee134e2c8d0c8e65284ede50 to before 2b9a0e57bfd365e2096706b19ae34dce3b4a884b, 013ff63b649475f0ee134e2c8d0c8e65284ede50 to before 20fd9f64c0050658f2031e6bd5d552c6f0c8f7e3, a7accf181a4709a6e380360372150cc4a1b6b89a, 3dfd727873c3e8da74a2e3907120ff052c5f0bcc, 1d7dd485108d4f633b543c9c14071cc325b68ae5, 5.15.209 to before 5.16, 6.1.115 to before 6.2, 6.5.11 to before 6.6
Linux
Linux · 6.6
Linux
Component: Not specified by the source
File: fs/ntfs3/record.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00174 · percentile 0.06403 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-90199.html