CVE-2026-98843
Last modified
CVE-2026-98843 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data netfs_read_gaps() leaves gaps around a streaming write's dirty region unread on the server side, so a short/EOF response there left stale folio content that later got written back. Zero it after the read completes, not before: netfs_wait_for_read() returns rreq->transferred once ret >= 0, so build an iterator over the same bvec array the read used, advance past ret, and zero the rest. The dirty region already maps to sink pages in that array rather than the real folio, so this can't touch it, and only the actual shortfall gets zeroed instead of the whole gap upfront..
Description
In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data netfs_read_gaps() leaves gaps around a streaming write's dirty region unread on the server side, so a short/EOF response there left stale folio content that later got written back. Zero it after the read completes, not before: netfs_wait_for_read() returns rreq->transferred once ret >= 0, so build an iterator over the same bvec array the read used, advance past ret, and zero the rest. The dirty region already maps to sink pages in that array rather than the real folio, so this can't touch it, and only the actual shortfall gets zeroed instead of the whole gap upfront.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= ee4cdf7ba857a894ad1650d6ab77669cbbfa329e, < 512eaf01ffabf4258e945016b50df5aed940b705; >= ee4cdf7ba857a894ad1650d6ab77669cbbfa329e, < 2a62fe628a877c249c8286b157ee99d82840d9dc; >= ee4cdf7ba857a894ad1650d6ab77669cbbfa329e, < 8db55c5cd831a786a1a2a2d391aa80354535a353 |
| Linux | Linux | 6.12 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98843?
How severe is CVE-2026-98843?
How do I fix CVE-2026-98843?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98838In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98839In the Linux kernel, the following vulnerability has been re…
- CVE-2026-9884Use after free in Browser in Google Chrome on Mac prior to 1…8.8
- CVE-2026-98840In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98841In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98842In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98844In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98845In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98846In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98847In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98848In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98849In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-98843?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
