CVE-2026-98842module: fix lost error code from codetag_load_module()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetag_load_module() If codetag_load_module() fails, err is not set to reflect the failure and load_module() returns 0 after the module has been torn down. Also, if the module is a livepatch, mod->klp_info allocated by copy_module_elf() leaks on this error path. Free it via a new livepatch_cleanup label.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 044d2aee6c575231ed4a24fb3d119bad0937488b before 258310d59a82ea4854bfd9138682bbaac1153b19; from 044d2aee6c575231ed4a24fb3d119bad0937488b before bfc721eef5c13704efe6864c7da2ad4b0d75f60a; from 044d2aee6c575231ed4a24fb3d119bad0937488b before c79cf15eb35a4c703bf18f8c33c47e80dd660f8e; b6bbbb8ef48dde09c0dbd77121fa0f09b0237fec; from 6.15.4 before 6.16 | CNA record |
References
- https://git.kernel.org/stable/c/258310d59a82ea4854bfd9138682bbaac1153b19
- https://git.kernel.org/stable/c/bfc721eef5c13704efe6864c7da2ad4b0d75f60a
- https://git.kernel.org/stable/c/c79cf15eb35a4c703bf18f8c33c47e80dd660f8e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.