CVE-2026-98868Medium· 4.4▾ SunlitA flaw was found in the Linux kernel's dm-pcache driver. A local attacker capable of presenting a crafted storage device with forged metadata can cause cache operations to exceed segment boundaries. This flaw triggers a kernel assertion fa…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 24.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
Last analysed / modified upstream
— → 4.4
none → medium
A flaw was found in the Linux kernel's dm-pcache driver. A local attacker capable of presenting a crafted storage device with forged metadata can cause cache operations to exceed segment boundaries. This flaw triggers a kernel assertion failure, leading to a system crash and resulting in a Denial of Service (DoS).
kernel: dm-pcache: reject a kset that overruns its segment — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-24.
Not affected:
Refer to the advisory for fix availability.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98870Medium· 6.5kernel: ksmbd: remove stale channels from all sessions on teardown (CVE-2026-98870)
CVE-2026-98874Low· 2.3kernel: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect (CVE-2026-98874)
CVE-2026-98872Medium· 4.4kernel: freevxfs: don't BUG() on unknown typed-extent type (CVE-2026-98872)
CVE-2026-98875Medium· 4.4kernel: drm/nouveau/gsp: add SEC2 to GA100 chip table (CVE-2026-98875)
CVE-2024-57804High· 7.3scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
CVE-2024-47794High· 7.8bpf: Prevent tailcall infinite loop caused by freplace