CVE-2026-98223
In the Linux kernel, the following vulnerability has been resolved: mm: filemap: retain mapped dropbehind folios Fault-around can map ready dropbehind folios without going through the normal page-cache lookup that clears dropbehind. A mapping represents a competing cached user, so retain the folio instead of forcibly unmapping it when writeback completes. For a mapped folio, folio_unmap_invalidate() can call unmap_mapping_folio(), which takes i_mmap_rwsem and may sleep. Retaining mapped folios avoids this path when folio_end_dropbehind() runs in non-preemptible task context. Tal was able to trigger a sleeping-in-atomic warning due to this [1]. Unmapped dropbehind folios continue through the existing invalidation path.
Affected versions
Linux kernel versions
6.14
and later are affected. Fixed in
6.18.54,
7.2.8,
7.3-rc4
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-98223?
CVE-2026-98223 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.14 onward and has been patched in 6.18.54, 7.2.8 and 7.3-rc4. CVE-2026-98223 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98223?
Yes. CVE-2026-98223 has been patched. Fixed versions include 6.18.54, 7.2.8 and 7.3-rc4. If you are running Linux kernel 6.14 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98223 actively exploited?
No. CVE-2026-98223 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.