Strix
73.1K

CVE-2026-98681

UnknownEPSS 0.17%

Last modified

CVE-2026-98681 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The invalidHandle, swapfile, oplock_break_cancelled, offload, and status_file_deleted fields are stored in the same bitfield byte in struct cifsFileInfo, but are updated in different code paths that may run simultaneously, and are protected by different locks. Since bitfield assignments generate byte-level read-modify-write operations, a modification to one flag can overwrite a concurrent modification to another flag. To avoid these races, convert these flags from a bitfield to separate bool fields.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The invalidHandle, swapfile, oplock_break_cancelled, offload, and status_file_deleted fields are stored in the same bitfield byte in struct cifsFileInfo, but are updated in different code paths that may run simultaneously, and are protected by different locks. Since bitfield assignments generate byte-level read-modify-write operations, a modification to one flag can overwrite a concurrent modification to another flag. To avoid these races, convert these flags from a bitfield to separate bool fields.

Metrics

EPSS Probability
0.17%

6.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 3bc303c254335dbd7c7012cc1760b12f1d5514d3, < f255e87b4f7eda568c37d6eae5db1d1a8aca5968; >= 3bc303c254335dbd7c7012cc1760b12f1d5514d3, < 7fa619367869be705942f087b2ecd209efc78fe1; >= 3bc303c254335dbd7c7012cc1760b12f1d5514d3, < e961baf9c1a4f2e93a55f8eb2c6151fc27b96a4c; >= 3bc303c254335dbd7c7012cc1760b12f1d5514d3, < 3b8e7928cf1928555dc05d172dd02fb0e7692ec4; >= 3bc303c254335dbd7c7012cc1760b12f1d5514d3, < 3786ee67658a2c80fef2544e7de2cd329e043cf9; >= 3bc303c254335dbd7c7012cc1760b12f1d5514d3, < 4165641d06ef44f3a31b77a28048b6c737e885e7; >= 3bc303c254335dbd7c7012cc1760b12f1d5514d3, < d9d23d115610e0342e768f6cb525d91c7b154027; >= 3bc303c254335dbd7c7012cc1760b12f1d5514d3, < 19465a9aeb664f1d710d0d22c07c31bfb7c85446
LinuxLinux2.6.32

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98681?
In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The invalidHandle, swapfile, oplock_break_cancelled, offload, and status_file_deleted fields are stored in the same bitfield byte in struct cifsFileInfo, but are updated in different code paths that may run simultaneously, and are protected by different locks. Since bitfield assignments generate byte-level read-modify-write operations, a modification to one flag can overwrite a concurrent modification to another flag. To avoid these races, convert these flags from a bitfield to separate bool fields.
How severe is CVE-2026-98681?
Severity scoring for CVE-2026-98681 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98681?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98681?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST