Out-of-bounds read in Linux kernel - CVE-2026-98117

Vulnerability details

The vulnerability allows a local user to trigger a kernel memory access error.

The vulnerability exists due to an out-of-bounds read in the cachefiles coherency tracing path when processing variable-length coherency data. A local user can cause coherency data shorter than eight bytes to be processed to trigger a kernel memory access error.

Affected software

How to mitigate CVE-2026-98117

External References

• https://git.kernel.org/stable/c/68d459e6e609c31f96a203dd6eec60c634f155e1
• https://git.kernel.org/stable/c/93488ea378b4427598cace558236c110515d743b
• https://git.kernel.org/stable/c/a67632c8c2688d6e0091529bcefe54bc5ee80e9b

Related Security Bulletins

• Out-of-bounds read in Linux kernel trace events