CVE-2026-98120

Published: Sep 25, 2026Modified: Oct 26, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref leak in netfs_unbuffered_write() in the event that subreq->io_iter ends up zero length during preparation.

Affected (11)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	6.18.17 ≤ version < 6.18.53
Linux Linux Kernel	6.19.7 ≤ version < 7.0
Linux Linux Kernel	7.0.1 ≤ version < 7.2.7
Linux Linux Kernel	Version 7.0
Linux Linux Kernel	Version 7.0 rc3
Linux Linux Kernel	Version 7.0 rc4
Linux Linux Kernel	Version 7.0 rc5
Linux Linux Kernel	Version 7.0 rc6
Linux Linux Kernel	Version 7.0 rc7
Linux Linux Kernel	Version 7.3 rc1
Linux Linux Kernel	Version 7.3 rc2

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (3)

https://git.kernel.org/stable/c/0a573f4283a965a5e8716f621aec404cb4575328

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/3c30087e27598d9d359763e8be9bd3017fe08348

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/ebefb12122d1319257ecac01c1a928f78007716a

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

Timeline

No history available yet.