CVE-2026-98972
In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() After seeing the patch [1] to guard is_in_v2_mode() with RCU, it makes me realize that is_in_v2_mode() may be called in a context where a new cgroup filesystem is being rebound with stale cpuset_cgrp_subsys.root pointer. Avoid this potential UaF situation by adding a new cpuset_v2_mode flag which is set when the cpuset_v2_mode mount option is used. This flag is written into only when cpuset_bind() is being called with a stable cpuset_cgrp_subsys.root value. The is_in_v2_mode() helper is modified to read the new cpuset_v2_mode flag instead of accessing cpuset_cgrp_subsys.root directly. [1] https://lore.kernel.org/lkml/[email protected]
Affected versions
Linux kernel versions
4.14
and later are affected. Fixed in
7.2.11,
7.3
and their respective stable series.
References
2 totalFrequently asked questions
-
What is CVE-2026-98972?
CVE-2026-98972 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 4.14 onward and has been patched in 7.2.11 and 7.3. CVE-2026-98972 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98972?
Yes. CVE-2026-98972 has been patched. Fixed versions include 7.2.11 and 7.3. If you are running Linux kernel 4.14 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98972 actively exploited?
No. CVE-2026-98972 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.