CVE-2026-98842
Linux: module: fix lost error code from codetag_load_module()
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
module: fix lost error code from codetag_load_module()
If codetag_load_module() fails, err is not set to reflect the failure and load_module() returns 0 after the module has been torn down.
Also, if the module is a livepatch, mod->klp_info allocated by copy_module_elf() leaks on this error path. Free it via a new livepatch_cleanup label.
Text from CVE List
Affected versions 10
- Linuxaffected: 044d2aee6c575231ed4a24fb3d119bad0937488b before 258310d59a82ea4854bfd9138682bbaac1153b19CVE List
- Linuxaffected: 044d2aee6c575231ed4a24fb3d119bad0937488b before bfc721eef5c13704efe6864c7da2ad4b0d75f60aCVE List
- Linuxaffected: 044d2aee6c575231ed4a24fb3d119bad0937488b before c79cf15eb35a4c703bf18f8c33c47e80dd660f8eCVE List
- Linuxaffected: b6bbbb8ef48dde09c0dbd77121fa0f09b0237fecCVE List
- Linuxaffected: 6.15.4 before 6.16CVE List
- Linuxaffected: 6.16CVE List
- Linuxunaffected: all versions before 6.16CVE List
- Linuxunaffected: 6.18.56 through 6.18.*CVE List
- Linuxunaffected: 7.2.10 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List