CVE-2026-98157
Received Received - Intake

EDAC/device_sysfs poll_msec Truncation Fix in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation The poll_msec sysfs store file uses simple_strtoul() which accepts an unsigned long, but the target field (poll_msec) is unsigned int. On 64-bit systems, a value > UINT_MAX is silently truncated when stored. Fix the mismatch by using kstrtouint() instead. This rejects values larger than UINT_MAX at parse time, making truncation impossible. Also add a check for value < 1 to reject the 0-delay case, which would cause the poll work to spin without delay and consume 100% CPU.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98157
EUVD
EUVD-2026-86988

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a mismatch in data handling for the poll_msec sysfs store file. The function uses simple_strtoul() which accepts large unsigned long values, but the target field (poll_msec) is an unsigned int. On 64-bit systems, values exceeding UINT_MAX are silently truncated when stored, potentially causing unexpected behavior.

Detection Guidance

This vulnerability affects the EDAC/device_sysfs module in the Linux kernel, specifically the poll_msec sysfs attribute. To detect it, check if the affected sysfs file exists and inspect its value. Run: ls /sys/devices/system/edac/poll_msec and cat /sys/devices/system/edac/poll_msec. If the value is set to a large number (greater than UINT_MAX), it may indicate truncation.

Impact Analysis

The vulnerability could lead to incorrect polling intervals being set, causing delayed or excessive system resource usage. In extreme cases, a zero delay might be set, causing the polling work to consume 100% CPU, degrading system performance.

Mitigation Strategies

Apply the kernel patch that replaces simple_strtoul() with kstrtouint() in the EDAC/device_sysfs module. Ensure the poll_msec value is set to a valid positive integer (at least 1) to prevent CPU overload. Update to a fixed kernel version if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98157. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart