CVE-2026-98388
N/AIn the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_lock do_close_on_exec() currently happens while holding the exec_update_lock, which is used in a lot of places that access process state to synchronize access checks. I recently added another such use of exec_update_lock, causing a regression. do_close_on_exec() can block waiting for a reply from a filesystem. That means a hung filesystem can block codepaths that use exec_update_lock; and it also means that a FUSE filesystem which attempts to inspect the calling process can deadlock. To avoid such problems, move do_close_on_exec() before the exec_update_lock is taken, but after the FD table has been copied if necessary. I have looked through all the calls between the old and new position of the do_close_on_exec() call; there seems to be no file descriptor table access in between.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 11th percentile
Impact if exploited
—CVSS · not scored
- No impact metrics
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
References and research data (JSON)
Vendor product assessments
Showing 32 of 277 vendor product statements; 245 omitted. Read the full vendor advisory.
kernel as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-abi-whitelists as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-abi-whitelists
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-bootwrapper as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-bootwrapper
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-debug as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-debug-devel as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug-devel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-devel as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-devel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-doc as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-doc
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-firmware as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-firmware
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-headers as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-headers
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-kdump as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-kdump
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel-kdump-devel as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-kdump-devel
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel.src as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel?arch=src
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
perf as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/perf
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
python-perf as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/python-perf
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
kernel as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-abi-stablelists as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-abi-stablelists
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-modules-extra-matched as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-modules-extra-matched
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-rt-core as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-core
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-uki-virt as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-uki-virt
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00bpftool as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/bpftool
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-rt-devel as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-devel
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-abi-whitelists as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-abi-whitelists
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-modules-internal as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-modules-internal
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-rt.src as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt?arch=src
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-64k-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-64k-modules-extra
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-debug-uki-virt as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug-uki-virt
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-64k-debug
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-rt-64k-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-64k-modules-internal
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-rt-kvm as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-kvm
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-zfcpdump-devel
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9
Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00
References
Advisories
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98388.json Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101037 EUVD · EUVD-2026-101037
Technical & other
- https://git.kernel.org/stable/c/955973fff4a36d39a848b00cac1706863f568fe1CVE record · Linux · Updated 2026-10-19T09:18:39.224Z
NVD · CVE-2026-98388 · Updated 2026-10-19T10:18:42.120 - https://git.kernel.org/stable/c/550feab5b01000ab314868b62211fb3ddfd600e8CVE record · Linux · Updated 2026-10-19T09:18:39.224Z
NVD · CVE-2026-98388 · Updated 2026-10-19T10:18:42.120 - https://git.kernel.org/stable/c/5aacc19ba2b1faf84c4a2f2cf9a1784e03d1ff38CVE record · Linux · Updated 2026-10-19T09:18:39.224Z
NVD · CVE-2026-98388 · Updated 2026-10-19T10:18:42.120 - https://git.kernel.org/stable/c/3feb4020bfb7ccf0d347f27051639d25e19cd65dCVE record · Linux · Updated 2026-10-19T09:18:39.224Z
NVD · CVE-2026-98388 · Updated 2026-10-19T10:18:42.120 - https://git.kernel.org/stable/c/0d86cd6b709c39216e6ee5ea8f0fc4242bbb2b53CVE record · Linux · Updated 2026-10-19T09:18:39.224Z
NVD · CVE-2026-98388 · Updated 2026-10-19T10:18:42.120 - https://git.kernel.org/stable/c/19ddef61ee0a49782a60f8f497e50597ad5de2daCVE record · Linux · Updated 2026-10-19T09:18:39.224Z
NVD · CVE-2026-98388 · Updated 2026-10-19T10:18:42.120 - https://git.kernel.org/stable/c/63be3d8511bdafa095cd14a393cbf3c58dbbb928CVE record · Linux · Updated 2026-10-19T09:18:39.224Z
NVD · CVE-2026-98388 · Updated 2026-10-19T10:18:42.120 - https://git.kernel.org/stable/c/e780259b54e618ceb4763fbc21314acf3565e813CVE record · Linux · Updated 2026-10-19T09:18:39.224Z
NVD · CVE-2026-98388 · Updated 2026-10-19T10:18:42.120 - https://access.redhat.com/security/cve/CVE-2026-98388 Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2552216 Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00
- https://www.cve.org/CVERecord?id=CVE-2026-98388 Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2026-98388 Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00
- https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98388.mbox Red Hat · CVE-2026-98388 · Updated 2026-10-18T08:29:11+00:00