SB20261022463 - Sensitive Information in Resource Not Removed Before Reuse in Linux kernel netfs buffered and unbuffered/direct write paths

Description

This security bulletin contains information about 1 vulnerability.

1) Sensitive Information in Resource Not Removed Before Reuse (CVE-ID: CVE-2026-98844)

CWE-ID: CWE-226 - Sensitive Information in Resource Not Removed Before Reuse

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to expose stale memory-mapped data as file contents when extending a file.

The vulnerability exists due to incomplete clearing of stale pagecache data in the Linux kernel netfs buffered and unbuffered/direct write paths when extending a file beyond its previous end. A local user can leave data beyond the end of a file through a memory mapping and subsequently write at a later offset to expose that stale data in the newly created hole instead of zero-filled contents.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/69bf14300b50631e7c2271289d347bbd1b19a06c
• https://git.kernel.org/stable/c/98f6a4589e0f5f6cf819b8dd45605efc481c06ce
• https://git.kernel.org/stable/c/a7036a73671fc83d299bc770710fe996d9fef9ca
• https://git.kernel.org/stable/c/f8f7d86b3537e885ee620898a38b749fba8a8456