Race condition in Linux kernel - CVE-2026-98682

Vulnerability identifier: #VU157013

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98682

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to corrupt file data on an SMB share.

The vulnerability exists due to a race condition in the Linux kernel SMB client's cifs_file_copychunk_range() function and the clone path of cifs_remap_file_range() when performing server-side copy or clone operations with outstanding destination writes. A local user can initiate these operations while asynchronous destination writeback is pending to cause stale data to overwrite the newly copied or cloned data, corrupting the destination file.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-realtime (Ubuntu package)
linux-oracle (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-raspi (Ubuntu package)
linux-ibm (Ubuntu package)
linux-oracle-7.0 (Ubuntu package)
linux-gcp-7.0 (Ubuntu package)
linux-azure-fde-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux-gke (Ubuntu package)
linux-azure-fde (Ubuntu package)
linux-aws-7.0 (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-43.43
linux-realtime (Ubuntu package) - update to 7.0.0-43.43.1
linux-oracle (Ubuntu package) - update to 7.0.0-1016.18
linux-aws (Ubuntu package) - update to 7.0.0-1017.18
linux-gcp (Ubuntu package) - update to 7.0.0-1017.19
linux-azure (Ubuntu package) - update to 7.0.0-1020.21
linux-raspi (Ubuntu package) - update to 7.0.0-1023.23
linux-ibm (Ubuntu package) - update to 7.0.0-1018.18
linux-oracle-7.0 (Ubuntu package) - update to 7.0.0-1016.18~24.04.1
linux-gcp-7.0 (Ubuntu package) - update to 7.0.0-1017.19~24.04.1
linux-azure-fde-7.0 (Ubuntu package) - update to 7.0.0-1019.19~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1018.18
linux-gke (Ubuntu package) - update to 7.0.0-1010.11
linux-azure-fde (Ubuntu package) - update to 7.0.0-1019.19
linux-aws-7.0 (Ubuntu package) - update to 7.0.0-1017.18~24.04.1

• https://git.kernel.org/stable/c/c9b1194e8ec99d95db25db45edd2fbf690f043ab
• https://git.kernel.org/stable/c/dc71660f11ef2fecc0695a41e49cd496a9d255ab

• Race condition in Linux kernel smb client
• Ubuntu update for linux, linux-aws, linux-gcp and more
• Ubuntu update for linux-azure
• Ubuntu update for linux-aws-7.0, linux-azure-fde, linux-azure-fde-7.0 and more
• Ubuntu update for linux-raspi