Memory Handler Vulnerability in Linux Kernel Affecting Cachefiles

CVE-2026-98117

What is CVE-2026-98117?

A vulnerability in the Linux Kernel related to cachefiles has been identified, where improper buffer management in the trace_cachefiles_coherency() function could trigger a use-after-free (UAF) condition or a KASAN warning. The implementation was using a pointer that may not have a guaranteed length, leading to potential memory issues. The resolution involves ensuring the buffer is adequately sized to handle at least 8 bytes and that these bytes are pre-cleared. Additionally, the data alignment issue has been addressed by extracting the bytes as four 2-byte words, which the compiler can then reassemble into an 8-byte load on systems that support it.

References