CVE-2026-98157

Awaiting Analysis Awaiting Analysis - Queue

EDAC/device_sysfs poll_msec Truncation Fix in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation The poll_msec sysfs store file uses simple_strtoul() which accepts an unsigned long, but the target field (poll_msec) is unsigned int. On 64-bit systems, a value > UINT_MAX is silently truncated when stored. Fix the mismatch by using kstrtouint() instead. This rejects values larger than UINT_MAX at parse time, making truncation impossible. Also add a check for value < 1 to reject the 0-delay case, which would cause the poll work to spin without delay and consume 100% CPU.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-03

Generated

2026-10-16

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-98157

EUVD

EUVD-2026-86988

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a mismatch in data handling for the poll_msec sysfs store file. The function uses simple_strtoul() which accepts large unsigned long values, but the target field (poll_msec) is an unsigned int. On 64-bit systems, values exceeding UINT_MAX are silently truncated when stored, potentially causing unexpected behavior.

Detection Guidance

This vulnerability affects the EDAC/device_sysfs module in the Linux kernel, specifically the poll_msec sysfs attribute. To detect it, check if the affected sysfs file exists and inspect its value. Run: ls /sys/devices/system/edac/poll_msec and cat /sys/devices/system/edac/poll_msec. If the value is set to a large number (greater than UINT_MAX), it may indicate truncation.

Impact Analysis

The vulnerability could lead to incorrect polling intervals being set, causing delayed or excessive system resource usage. In extreme cases, a zero delay might be set, causing the polling work to consume 100% CPU, degrading system performance.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA. It involves a kernel memory handling issue that could lead to system instability or resource exhaustion, but there is no evidence it impacts data privacy or security controls required by these regulations.

Mitigation Strategies

Apply the kernel patch that replaces simple_strtoul() with kstrtouint() in the EDAC/device_sysfs module. Ensure the poll_msec value is set to a valid positive integer (at least 1) to prevent CPU overload. Update to a fixed kernel version if available.

Hi! I’m here to help you understand CVE-2026-98157. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70