All vulnerabilities
CVE-2026-98434

Linux: sysctl: Check range in proc_dointvec_ms_jiffies_minmax

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.14%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1c23dba51dbf7e86c7c2e617c964be1411329cb4Also 82431877d837a6c2593efd8e66ba28b35a220ca4CVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 1c23dba51dbf7e86c7c2e617c964be1411329cb4LinuxCVE List
  • 82431877d837a6c2593efd8e66ba28b35a220ca4LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

sysctl: Check range in proc_dointvec_ms_jiffies_minmax

Add the range check to do_proc_int_conv_ms_jiffies_minmax that commit d174174c6776 ("sysctl: replace SYSCTL_INT_CONV_CUSTOM macro with functions") incorrectly removed.

Text from CVE List

Affected versions 6

  • Linuxaffected: d174174c6776a340f5c25aab1ac47a2dd950f380 before 1c23dba51dbf7e86c7c2e617c964be1411329cb4CVE List
  • Linuxaffected: d174174c6776a340f5c25aab1ac47a2dd950f380 before 82431877d837a6c2593efd8e66ba28b35a220ca4CVE List
  • Linuxaffected: 7.0CVE List
  • Linuxunaffected: all versions before 7.0CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 2