Medium severity5.5NVD Advisory· Published Sep 25, 2026· Updated Oct 26, 2026

CVE-2026-98120

Description

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix subreq ref leak

Fix a subrequest ref leak in netfs_unbuffered_write() in the event that subreq->io_iter ends up zero length during preparation.

Linux/Kernel10 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.18.17,<6.18.53
- cpe:2.3:o:linux:linux_kernel:7.0:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.3:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.3:rc2:*:*:*:*:*:*
- (no CPE)
osv-coords2 versions
pkg:linux/kernel pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
< 6.18.53+ 1 more
- (no CPE)range: < 6.18.53
- (no CPE)range: < 7.2.9-1.1