CVE-2026-98117
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, trace_cachefiles_coherency() is being passed a pointer to a __be64 lain over the coherency data in struct cachefiles_xattr so that it can display the first 8 bytes. However, the data is of variable length and could even be 0 bytes. This could lead to a UAF or KASAN warning. Fix this by making sure the buffer has room for at least 8 bytes and that those 8 bytes are pre-cleared. Further, those bytes are not 8-byte aligned, so fix the tracepoint to extract the data as four 2-byte words (they are 2-byte aligned) and reassemble the __be64. The compiler will convert this into a single 8-byte load where the CPU supports it.
Affected versions
Linux kernel versions
6.14
and later are affected. Fixed in
6.18.53,
7.2.7,
7.3-rc3
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-98117?
CVE-2026-98117 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.14 onward and has been patched in 6.18.53, 7.2.7 and 7.3-rc3. CVE-2026-98117 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98117?
Yes. CVE-2026-98117 has been patched. Fixed versions include 6.18.53, 7.2.7 and 7.3-rc3. If you are running Linux kernel 6.14 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98117 actively exploited?
No. CVE-2026-98117 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.