CVE-2026-98224

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: mm/vma: correctly unaccount on mmap_prepare() failure __mmap_setup() accounts memory for relevant mappings via: security_vm_enough_memory_mm() -> __vm_enough_memory() -> vm_acct_memory() If __mmap_setup() fails, this indicates that this accounting did not take place, and thus it's appropriate for __mmap_region() to jump to abort_munmap. However if call_mmap_prepare() fails, it also jumps there and any accounted memory is not correctly unaccounted. Fix this by handling each error separately.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-10-06 09:18:09.427000

Last modified

2026-10-19 10:18:23.160000

View original CVE JSON

{
  "id": "CVE-2026-98224",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-10-06T09:18:09.427",
  "lastModified": "2026-10-19T10:18:23.160",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/vma: correctly unaccount on mmap_prepare() failure\n\n__mmap_setup() accounts memory for relevant mappings via:\n\nsecurity_vm_enough_memory_mm()\n  -> __vm_enough_memory()\n    -> vm_acct_memory()\n\nIf __mmap_setup() fails, this indicates that this accounting did not take\nplace, and thus it's appropriate for __mmap_region() to jump to\nabort_munmap.\n\nHowever if call_mmap_prepare() fails, it also jumps there and any accounted\nmemory is not correctly unaccounted.\n\nFix this by handling each error separately."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "mm/vma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "c84bf6dd2b836b49bb2662668ff1692350d28236",
              "lessThan": "fb5400bff669c8bad3d4ec09287d9b461e89e5f1",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c84bf6dd2b836b49bb2662668ff1692350d28236",
              "lessThan": "8fdc521d438fbf0d22c13d51d55d5dd82d7202b2",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c84bf6dd2b836b49bb2662668ff1692350d28236",
              "lessThan": "6cc27d82196385fe06853319f74312a7d8019726",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "mm/vma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.16",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.16",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.54",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.8",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/6cc27d82196385fe06853319f74312a7d8019726",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8fdc521d438fbf0d22c13d51d55d5dd82d7202b2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/fb5400bff669c8bad3d4ec09287d9b461e89e5f1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}