CVE-2026-98224

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: mm/vma: correctly unaccount on mmap_prepare() failure __mmap_setup() accounts memory for relevant mappings via: security_vm_enough_memory_mm() -> __vm_enough_memory() -> vm_acct_memory() If __mmap_setup() fails, this indicates that this accounting did not take place, and thus it's appropriate for __mmap_region() to jump to abort_munmap. However if call_mmap_prepare() fails, it also jumps there and any accounted memory is not correctly unaccounted. Fix this by handling each error separately.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 6, 2026
First seenOct 6, 2026

How to fix

Update
  • Linux Linuxfb5400bff669c8bad3d4ec09287d9b461e89e5f1, 8fdc521d438fbf0d22c13d51d55d5dd82d7202b2, 6cc27d82196385fe06853319f74312a7d8019726 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxc84bf6dd2b836b49bb2662668ff1692350d28236 ≤ v < fb5400bff669c8bad3d4ec09287d9b461e89e5f1, c84bf6dd2b836b49bb2662668ff1692350d28236 ≤ v < 8fdc521d438fbf0d22c13d51d55d5dd82d7202b2, c84bf6dd2b836b49bb2662668ff1692350d28236 ≤ v < 6cc27d82196385fe06853319f74312a7d8019726, 6.16fb5400bff669c8bad3d4ec09287d9b461e89e5f1, 8fdc521d438fbf0d22c13d51d55d5dd82d7202b2, 6cc27d82196385fe06853319f74312a7d8019726

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.