CVE-2026-80898

{"id": "CVE-2026-80898", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "e2d46f2ec332533816417b60933954173f602121", "lessThan": "627826ef4208042b0470d1a3fdb729ce35471a0d", "versionType": "git"}, {"status": "affected", "version": "e2d46f2ec332533816417b60933954173f602121", "lessThan": "614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e", "versionType": "git"}, {"status": "affected", "version": "e2d46f2ec332533816417b60933954173f602121", "lessThan": "a81fc9266e1c5fef9ccf675a9b44b2f4ab464923", "versionType": "git"}], "programFiles": ["fs/netfs/read_pgpriv2.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.14"}, {"status": "unaffected", "version": "0", "lessThan": "6.14", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.44", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.8", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/netfs/read_pgpriv2.c"], "defaultStatus": "affected"}]}], "published": "2026-09-04T18:17:58.067", "references": [{"url": "https://git.kernel.org/stable/c/614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/627826ef4208042b0470d1a3fdb729ce35471a0d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a81fc9266e1c5fef9ccf675a9b44b2f4ab464923", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: clear PG_private_2 on copy-to-cache append failure\n\nnetfs_pgpriv2_copy_to_cache() marks the folio with PG_private_2 before\nnetfs_pgpriv2_copy_folio() appends it to the copy-to-cache rolling\nbuffer.\n\nIf the append fails, the folio is not queued for cache writeback, so\nthe PG_private_2 state and its reference must be released immediately."}], "lastModified": "2026-09-04T18:17:58.067", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}