CVE-2026-98267
In the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix v9fs_issue_write() to update i_size and remote_i_size to the new size of the server file if we made it larger, using the start fpos and the count returned by p9_client_write() to calculate the new minimum file size. This assumes that if the 9P server makes a short write (say it hits ENOSPC), a reduced count is returned.
Affected versions
Linux kernel versions
6.10
and later are affected. Fixed in
6.12.112,
6.18.54,
7.2.8,
7.3-rc4
and their respective stable series.
References
4 totalFrequently asked questions
-
What is CVE-2026-98267?
CVE-2026-98267 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.10 onward and has been patched in 6.12.112, 6.18.54, 7.2.8 and others. CVE-2026-98267 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98267?
Yes. CVE-2026-98267 has been patched. Fixed versions include 6.12.112, 6.18.54, 7.2.8 and others. If you are running Linux kernel 6.10 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98267 actively exploited?
No. CVE-2026-98267 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.