CVE-2026-98867dm-pcache: bound the logical key offset from persistent memory
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from persistent memory cache_key_decode() takes a key's logical off from the cache device and later indexes req_key_tree->subtrees[] by it in get_subtree(). An off past the device forms a subtree pointer outside the array, which rb_insert() writes through during replay. Reject a key of zero length, or whose off+len (computed in 64 bits) exceeds the device size, before it is used.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 before 3d5a87cb909c1f375f08065b20123fa5db5958d8; from 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 before 10449703200076980704894c3d68d6796182371b; from 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 before 97fc4b53dbe4a983fdf093243067fa6a64562307 | CNA record |
References
- https://git.kernel.org/stable/c/3d5a87cb909c1f375f08065b20123fa5db5958d8
- https://git.kernel.org/stable/c/10449703200076980704894c3d68d6796182371b
- https://git.kernel.org/stable/c/97fc4b53dbe4a983fdf093243067fa6a64562307
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.