Detections
Analytics

Chainguard: linux-desktop-7.2-bootc: security update to 7.2.7-r0

medium Tenable Self-Hosted Container Security Plugin ID 474660

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in
 sync_fs when errors were recorded ntfs_put_super() and the remount-read-only path both clear the dirty bit
 only when NVolErrors(vol) is false. ntfs_sync_fs() clears it unconditionally, so any sync() on a volume
 that recorded an error marks that volume clean. A volume without this set is then seen as not needing
 recovery and it does not run one, so whatever went wrong is never repaired. This change skips resetting
 the dirty bit when there are volume errors. Reproduced on a volume whose $MFTMirr does not match $MFT,
 which sets the error flag while leaving the mount read-write: after a write and a sync, the on-disk volume
 flags read 0x0000 with this driver and 0x0001 with the guard in place. (CVE-2026-98138)

Solution

Update the linux-desktop-7.2-bootc library and its related packages to version 7.2.7-r0 or later.

Plugin Details

Severity: Medium

ID: 474660

Version: Revision 1.1

Type: Local

Published: 10/16/2026

Updated: 10/16/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.68

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-98138

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/25/2026

Reference Information

CVE: CVE-2026-98138