{"schema":"threatline.record/2","record":{"id":"CVE-2026-98057","aliases":[],"summary":"ring-buffer: Add checking nr_subbufs to persistent ring buffer validation","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Add checking nr_subbufs to persistent ring buffer validation\n\nSashiko reported that the code was using meta->nr_subbufs without making\nsure that it matched the nr_pages + 1 on data that was assuming the two\nwere the same.\n\nAdd a check to the persistent ring buffer validation code to make sure\nthat the saved nr_subbufs matches what we expect.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98057","source_modified_at":"2026-10-19T09:13:03.914Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"3ec743d558f111d8999aea24577ba66c65ee2eeb","lessThan":"f0467190e6a9fc61e343c8064ef16aad513788c3","status":"affected","versionType":"git"},{"version":"f5b95f1fa2ef3a03f49eeec658ba97e721412b32","lessThan":"364a31052aa9ef91db137f82d797366007cd85b7","status":"affected","versionType":"git"},{"version":"f5b95f1fa2ef3a03f49eeec658ba97e721412b32","lessThan":"69d502457e3f76142f7fcf6e2625e80e0ce8a60f","status":"affected","versionType":"git"},{"version":"f5b95f1fa2ef3a03f49eeec658ba97e721412b32","lessThan":"6c001a62c34f13fe1c6a24304c289b387d9e697d","status":"affected","versionType":"git"},{"version":"0d547a6f5e8fad26ebc12f501d7d19fccdbad6bf","status":"affected","versionType":"git"},{"version":"6.12.16","lessThan":"6.12.111","status":"affected","versionType":"semver"},{"version":"6.13.4","lessThan":"6.14","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98057","source_modified_at":"2026-10-19T09:13:03.914Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.14","status":"affected"},{"version":"0","lessThan":"6.14","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.57","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98057","source_modified_at":"2026-10-19T09:13:03.914Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"364a31052aa9ef91db137f82d797366007cd85b7","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98057","source_modified_at":"2026-10-19T09:13:03.914Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"69d502457e3f76142f7fcf6e2625e80e0ce8a60f","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98057","source_modified_at":"2026-10-19T09:13:03.914Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"6c001a62c34f13fe1c6a24304c289b387d9e697d","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98057","source_modified_at":"2026-10-19T09:13:03.914Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"6.12.111","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98057","source_modified_at":"2026-10-19T09:13:03.914Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"6.14","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00168,"percentile":0.05747,"score_date":"2026-10-23"},"published_at":"2026-09-25T10:24:03.541Z","modified_at":"2026-10-19T09:13:03.914Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-98057","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:13:03.914Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98057","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/f0467190e6a9fc61e343c8064ef16aad513788c3"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/364a31052aa9ef91db137f82d797366007cd85b7"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/69d502457e3f76142f7fcf6e2625e80e0ce8a60f"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/6c001a62c34f13fe1c6a24304c289b387d9e697d"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:13:03.914Z","content_hash":"89a78d4e19b98dac226e4d75f0ff0b7e1f6634ae93f2dd238d8b898919a35a76"}}