CVE-2026-98224
Linux: mm/vma: correctly unaccount on mmap_prepare() failure
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in8fdc521d438fbf0d22c13d51d55d5dd82d7202b2Also 6cc27d82196385fe06853319f74312a7d8019726CVE List
What fixes it
- 8fdc521d438fbf0d22c13d51d55d5dd82d7202b2LinuxCVE List
- 6cc27d82196385fe06853319f74312a7d8019726LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
mm/vma: correctly unaccount on mmap_prepare() failure
__mmap_setup() accounts memory for relevant mappings via:
security_vm_enough_memory_mm() -> __vm_enough_memory() -> vm_acct_memory()
If __mmap_setup() fails, this indicates that this accounting did not take place, and thus it's appropriate for __mmap_region() to jump to abort_munmap.
However if call_mmap_prepare() fails, it also jumps there and any accounted memory is not correctly unaccounted.
Fix this by handling each error separately.
Text from CVE List
Affected versions 8
- Linuxaffected: c84bf6dd2b836b49bb2662668ff1692350d28236 before fb5400bff669c8bad3d4ec09287d9b461e89e5f1CVE List
- Linuxaffected: c84bf6dd2b836b49bb2662668ff1692350d28236 before 8fdc521d438fbf0d22c13d51d55d5dd82d7202b2CVE List
- Linuxaffected: c84bf6dd2b836b49bb2662668ff1692350d28236 before 6cc27d82196385fe06853319f74312a7d8019726CVE List
- Linuxaffected: 6.16CVE List
- Linuxunaffected: all versions before 6.16CVE List
- Linuxunaffected: 6.18.54 through 6.18.*CVE List
- Linuxunaffected: 7.2.8 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List