Race condition in Linux kernel - CVE-2026-98505

Vulnerability identifier: #VU156806

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98505

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to potentially cause hardware-updated page table state, including dirty bits, to be lost.

The vulnerability exists due to a race condition in damon_hugetlb_mkold() in mm/damon/vaddr.c when clearing the accessed bit in a huge page table entry while hardware updates the same entry. A local user can potentially cause memory writes to overlap with this operation, allowing the function to overwrite hardware-updated dirty bits with a stale page table entry.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/00457981327c80bcc56e07d4714fe189337a19fa
• https://git.kernel.org/stable/c/39c0ceedd54557bdc1542de08d22b2ed33e534e4
• https://git.kernel.org/stable/c/6e74ffc9ecf6ec24eee117150da78a1102be74c5
• https://git.kernel.org/stable/c/7ed1062d154ec2401f2c894fd6858598bb1160b6
• https://git.kernel.org/stable/c/e59cb7eda7c06334a0faf5aa44adb6acf2a1287a

• Race condition in Linux kernel damon
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more