---
id: CVE-2026-98139
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ntfs: only count successfully cleared runs when freeing clusters

  ntfs_cluster_free_from_rl_nolock() adds a run's length to nr_freed
  whenever the error bookkeeping cond…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ntfs: only count successfully cleared runs when freeing clusters

  ntfs_cluster_free_from_rl_nolock() adds a run's length to nr_freed
  whenever the error bookkeeping cond…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 11ccc9107dc460de28af90fac1f42404d9802735 <
    7eb97d8828e7758b9c81277f7802e740a800f78a
  - >-
    Linux >= 11ccc9107dc460de28af90fac1f42404d9802735 <
    be9e89ccb8e52a3e4b67feeb03ebd8133091dc7e
  - Linux 7.1
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T11:17:45.383'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98139'
references:
  - url: 'https://git.kernel.org/stable/c/7eb97d8828e7758b9c81277f7802e740a800f78a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/be9e89ccb8e52a3e4b67feeb03ebd8133091dc7e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-25T11:06:38.810Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ntfs: only count successfully cleared runs when freeing clusters

ntfs_cluster_free_from_rl_nolock() adds a run's length to nr_freed
whenever the error bookkeeping condition is false, which includes
cases where ntfs_bitmap_clear_run() actually failed - e.g. a second
run failing with the same errno as an earlier one, or any failure
after a non-ENOMEM error was already recorded. Since a failed
ntfs_bitmap_clear_run() rolls back its partial modifications, no
bits were cleared for that run, yet its length still inflates
vol->free_clusters, corrupting statfs output and the allocator's
free space gate.

Only count runs whose bitmap clear succeeded.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.