CVE-2026-98120
Linux: netfs: Fix subreq ref leak
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0a573f4283a965a5e8716f621aec404cb4575328Also 3c30087e27598d9d359763e8be9bd3017fe08348, 6.18.53 and 1 moreCVE List
What fixes it
- 0a573f4283a965a5e8716f621aec404cb4575328LinuxCVE List
- 3c30087e27598d9d359763e8be9bd3017fe08348LinuxCVE List
- 6.18.53LinuxCVE List
- 6.20LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix subreq ref leak
Fix a subrequest ref leak in netfs_unbuffered_write() in the event that subreq->io_iter ends up zero length during preparation.
Text from CVE List
Affected versions 11
- Linuxaffected: 72d08d2839649d1c5efbe375751f4473fa4486af before ebefb12122d1319257ecac01c1a928f78007716aCVE List
- Linuxaffected: a0b4c7a49137ed21279f354eb59f49ddae8dffc2 before 0a573f4283a965a5e8716f621aec404cb4575328CVE List
- Linuxaffected: a0b4c7a49137ed21279f354eb59f49ddae8dffc2 before 3c30087e27598d9d359763e8be9bd3017fe08348CVE List
- Linuxaffected: 0c29f6d63122a0168d67cb8ecde5b4cf7fe4acb0CVE List
- Linuxaffected: 6.18.17 before 6.18.53CVE List
- Linuxaffected: 6.19.7 before 6.20CVE List
- Linuxaffected: 7.0CVE List
- Linuxunaffected: all versions before 7.0CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List