What is CVE-2026-98872?

CVE-2026-98872 is a unscored severity Linux kernel vulnerability. CVE-2026-98872 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98872?

CVE-2026-98872 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-98872?

Yes, CVE-2026-98872 has been patched. Fixed versions include 5.10.271, 5.15.222, 6.1.189 and others.

Is CVE-2026-98872 actively exploited?

CVE-2026-98872 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98872

In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG() on unknown typed-extent type vxfs_bmap_typed() handles four typed-extent types and calls BUG() in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from ioctl(FIBMAP) on a regular file: kernel BUG at fs/freevxfs/vxfs_bmap.c:230! RIP: vxfs_bmap_typed fs/freevxfs/vxfs_bmap.c:230 [inline] vxfs_bmap1+0x128a/0x12d0 fs/freevxfs/vxfs_bmap.c:257 Replace the BUG() with WARN_ON_ONCE() and return 0 -- the value vxfs_bmap_typed() already returns on failure (and from the DEV4 case above); vxfs_getblk() maps 0 to -EIO, so the ioctl fails cleanly.

Package Linux Kernel

Published 2026-10-23

Last modified 2026-10-23

Patch available

Yes

Affected versions

Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2 and their respective stable series.

Fixed in

✓ 5.10.271 5.10.x ✓ 5.15.222 5.15.x ✓ 6.1.189 6.1.x ✓ 6.6.158 6.6.x ✓ 6.12.111 6.12.x ✓ 6.18.53 6.18.x ✓ 7.2

References

7 total

Showing 5 of 7 references View all on NVD

Frequently asked questions

What is CVE-2026-98872?

CVE-2026-98872 is a unscored severity Linux kernel vulnerability . CVE-2026-98872 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-98872?

Yes. CVE-2026-98872 has been patched. Fixed versions include 5.10.271, 5.15.222, 6.1.189 and others.
Is CVE-2026-98872 actively exploited?

No. CVE-2026-98872 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.