{"apiVersion":"1.0","identifier":"CVE-2026-99131","description":"In the Linux kernel, the following vulnerability has been resolved: xfs: fix capability check in xfs An user reported a bug where he managed to evade group-s quota by changing a file-s gid to a different group id the same user belonged to, even though quotas were enforced on both gids and the file-s size was big enough to exceed the quota-s hardlimit. Commit eba0549bc7d1 replaced a capable() call by a has_capability_noaudit() to prevent unnecessary selinux audit messages. Turns out that both calls have slightly different semantics even though their documentation seems similar. Where in a nutshell: capable() - Tests the task-s effective credentials has_ns_capability_noaudit() - Tests the task-s real credentials This most of the time has no practical difference but in some cases like changing attrs (specifically group id in this case) through a NFS client this will allow the quota code to use XFS_QMOPT_FORCE_RES, effectively bypassing quota accounting checks. Using instead ns_capable_noaudit() should fix this issue and prevent selinux audit messages. This also fix the remaining calls to has_capability_noaudit()","publishedAt":"2026-10-28T11:17:32","lastModifiedAt":"2026-10-31T13:17:56","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-99131","cvssScore":8.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","epssProbability":0.0045,"riskScore":0.85,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-99131","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-99131","en":"https://www.redsauce.net/en/cves/CVE-2026-99131","fr":"https://www.redsauce.net/fr/cves/CVE-2026-99131","pt":"https://www.redsauce.net/pt/cves/CVE-2026-99131","de":"https://www.redsauce.net/de/cves/CVE-2026-99131","sk":"https://www.redsauce.net/sk/cves/CVE-2026-99131","el":"https://www.redsauce.net/el/cves/CVE-2026-99131"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-99131"}}