CVE-2026-98867
NONE—CVSS v3
—CVSS v2
0.15%
EPSS (exploit probability)
—CWE
Description
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: bound the logical key offset from persistent memory
cache_key_decode() takes a key's logical off from the cache device and
later indexes req_key_tree->subtrees[] by it in get_subtree(). An off
past the device forms a subtree pointer outside the array, which
rb_insert() writes through during replay.
Reject a key of zero length, or whose off+len (computed in 64 bits)
exceeds the device size, before it is used.
Affected routers (0)
No routers currently mapped to this CVE in our database.