CVE-2026-98223mm: filemap: retain mapped dropbehind folios
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mm: filemap: retain mapped dropbehind folios Fault-around can map ready dropbehind folios without going through the normal page-cache lookup that clears dropbehind. A mapping represents a competing cached user, so retain the folio instead of forcibly unmapping it when writeback completes. For a mapped folio, folio_unmap_invalidate() can call unmap_mapping_folio(), which takes i_mmap_rwsem and may sleep. Retaining mapped folios avoids this path when folio_end_dropbehind() runs in non-preemptible task context. Tal was able to trigger a sleeping-in-atomic warning due to this [1]. Unmapped dropbehind folios continue through the existing invalidation path.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from fb7d3bc4149395c1ae99029c852eab6c28fc3c88 before 2897601dffe576fcd87a4259102f41f7fb0cbfc8; from fb7d3bc4149395c1ae99029c852eab6c28fc3c88 before 77c0fade37c80e8aa16ac048a9828249055e3f66; from fb7d3bc4149395c1ae99029c852eab6c28fc3c88 before 848d2ce2fce15fbdc083fbf9691bfa72911033c4 | CNA record |
References
- https://git.kernel.org/stable/c/2897601dffe576fcd87a4259102f41f7fb0cbfc8
- https://git.kernel.org/stable/c/77c0fade37c80e8aa16ac048a9828249055e3f66
- https://git.kernel.org/stable/c/848d2ce2fce15fbdc083fbf9691bfa72911033c4
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.