All vulnerabilities
CVE-2026-98267

Linux: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in88871ab548c1d7b11cde9b04063f3c1c6fbd7039Also 9cd92e3392bdd14568e9e44aec1ac05e1fcd62e5CVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 88871ab548c1d7b11cde9b04063f3c1c6fbd7039LinuxCVE List
  • 9cd92e3392bdd14568e9e44aec1ac05e1fcd62e5LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

9p: Fix v9fs_issue_write() to update i_size and remote_i_size

Fix v9fs_issue_write() to update i_size and remote_i_size to the new size of the server file if we made it larger, using the start fpos and the count returned by p9_client_write() to calculate the new minimum file size.

This assumes that if the 9P server makes a short write (say it hits ENOSPC), a reduced count is returned.

Text from CVE List

Affected versions 10

  • Linuxaffected: 5fb70e7275a61dd404f684370e1add7fe0ebe9c5 before aeb1fe55583836744aef11fbfa2a09122aa9816cCVE List
  • Linuxaffected: 5fb70e7275a61dd404f684370e1add7fe0ebe9c5 before 88871ab548c1d7b11cde9b04063f3c1c6fbd7039CVE List
  • Linuxaffected: 5fb70e7275a61dd404f684370e1add7fe0ebe9c5 before 9cd92e3392bdd14568e9e44aec1ac05e1fcd62e5CVE List
  • Linuxaffected: 5fb70e7275a61dd404f684370e1add7fe0ebe9c5 before c60ae98c5aa64021751b38ab1313b19d620bf640CVE List
  • Linuxaffected: 6.10CVE List
  • Linuxunaffected: all versions before 6.10CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4