CVE-2026-98117
Received Received - Intake

Use-After-Free in Linux Kernel cachefiles

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, trace_cachefiles_coherency() is being passed a pointer to a __be64 lain over the coherency data in struct cachefiles_xattr so that it can display the first 8 bytes. However, the data is of variable length and could even be 0 bytes. This could lead to a UAF or KASAN warning. Fix this by making sure the buffer has room for at least 8 bytes and that those 8 bytes are pre-cleared. Further, those bytes are not 8-byte aligned, so fix the tracepoint to extract the data as four 2-byte words (they are 2-byte aligned) and reassemble the __be64. The compiler will convert this into a single 8-byte load where the CPU supports it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98117
EUVD
EUVD-2026-86948

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free (UAF) or KASAN warning vulnerability in the Linux kernel's cachefiles subsystem. It occurs when trace_cachefiles_coherency() accesses a pointer to a __be64 overlaid on coherency data in struct cachefiles_xattr. The data length is variable and could be zero, leading to potential memory corruption or warnings.

Detection Guidance

This vulnerability is specific to the Linux kernel's cachefiles component and may not have direct network detection methods. Monitor kernel logs for KASAN warnings or UAF-related errors using dmesg or journalctl. Check for crashes in cachefiles-related processes.

Impact Analysis

This vulnerability could cause system instability, crashes, or security issues due to memory corruption. It may lead to kernel panics, data corruption, or privilege escalation if exploited. Users running affected Linux kernel versions should apply patches immediately.

Mitigation Strategies

Apply the kernel patch that resolves this issue. Update your Linux kernel to the latest stable version provided by your distribution. If a patch is not yet available, consider disabling cachefiles functionality temporarily until the fix is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98117. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart