Vulnpedia
← Search CVEs

CVE-2026-98226

N/A

Published 2026-10-06 · Last modified 2026-10-19

In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count SWAP_USAGE_OFFLIST_BIT is embedded in the si->inuse_pages usage counter, and is meant to sit above any value that counter can reach. However, it is defined from BITS_PER_TYPE(atomic_t), so it is bit 30. On a system with 4 KiB pages the flag collides with the usage count once that count reaches 4 TiB. swap_usage_in_pages() masks bit 30 out, so whenever the real count has that bit set, every caller of it reads 4 TiB low: * /proc/swaps understates Used by 4 TiB. * A raw count of exactly 2^30 masks to zero, so try_to_unuse() takes its "if (!swap_usage_in_pages(si)) goto success;" early exit and swapoff tears the device down while pages are still swapped out. Nothing in the rest of swapoff aborts the teardown, so those pages are lost. Independently of swapoff, the collision also corrupts the counter and the plist. On a device in normal use, a free that leaves bit 30 set in the count makes swap_usage_sub() see the flag where there is only count, and call add_to_avail_list(). It clears the bit with fetch_and(~SWAP_USAGE_OFFLIST_BIT), leaving the stored count 4 TiB below the real one, and calls plist_add() on a device that is already listed, tripping the WARN_ON(!plist_node_empty(node)) in plist_add() and linking the node a second time. Change the definition of SWAP_USAGE_OFFLIST_BIT to be based on atomic_long_t instead. Note that the usage counter field itself is of this same type, so it is still a valid bit.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 6th percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

—CVSS · not scored

  • No impact metrics

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Linux

Products Linux

Weakness (CWE)

Not classified.

CVSS vector

Not yet scored.

References and research data (JSON)

Vendor product assessments

Showing 32 of 278 vendor product statements; 246 omitted. Read the full vendor advisory.

  • kernel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-64k-debug-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k-debug-devel

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-64k-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k-devel

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-abi-stablelists as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-abi-stablelists

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-debug-devel-matched as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug-devel-matched

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-devel

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-modules-extra

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-64k-core as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-core

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-debug-modules-extra

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-core as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-core

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-modules

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-modules as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-modules

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-tools-libs-devel

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-zfcpdump-devel

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel.src as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel?arch=src

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • rv as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/rv

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel as a component of Red Hat Enterprise Linux 6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • python-perf as a component of Red Hat Enterprise Linux 6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/python-perf

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-debug-devel

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • perf as a component of Red Hat Enterprise Linux 7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/perf

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-debug-modules-internal as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-debug-modules-internal

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-debug-modules

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-tools-libs-devel

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-64k-core as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-64k-core

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-64k-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-64k-modules-extra

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-debug-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-debug-modules-internal

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-modules-internal

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-64k-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-64k-debug-modules-partner

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-debug-devel-matched as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-debug-devel-matched

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-modules-internal

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • kernel-zfcpdump-modules as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-zfcpdump-modules

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00
  • openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9

    Red Hat · CVE-2026-98226 · Updated 2026-10-22T00:50:32+00:00

References

Advisories

Technical & other

Sources: NVD · CVE.org · EPSS