{"id":"CVE-2026-90134","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nntfs: fix kmap_local_page() usage in compress\n\nSeveral compressed I/O paths discard the address returned by\nkmap_local_page() and later access or unmap the page using p…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nntfs: fix kmap_local_page() usage in compress\n\nSeveral compressed I/O paths discard the address returned by\nkmap_local_page() and later access or unmap the page using p…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 495e90fa334828d4119061e2726af51d0a0fb4ed < 950e2ecc7aec21af24b05bc661a097a81c670409","Linux >= 495e90fa334828d4119061e2726af51d0a0fb4ed < 6e03fbd5f772ad24ea64f7632e4d0d73184787ca","Linux 7.1"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:17:05.950","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90134","references":[{"url":"https://git.kernel.org/stable/c/6e03fbd5f772ad24ea64f7632e4d0d73184787ca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/950e2ecc7aec21af24b05bc661a097a81c670409","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-17T16:21:47.879Z","epss":0.00189,"epssPercentile":0.08835,"slug":"CVE-2026-90134","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nntfs: fix kmap_local_page() usage in compress\n\nSeveral compressed I/O paths discard the address returned by\nkmap_local_page() and later access or unmap the page using page_address().\nThis is invalid for highmem pages, and local mappings must also be unmapped\nusing the address returned by kmap_local_page().\n\nMap each destination page in ntfs_decompress() only while producing the\ncurrent sub-block. Use memcpy_from_page(), memcpy_to_page(), and\nmemzero_page() for the other page accesses. Remove unnecessary local\nmappings from ntfs_write_cb(), where pages are accessed through the vmap()\nmapping.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}