Linux Kernel Vulnerability in SMB Client Operations Affecting File System

CVE-2026-98124

What is CVE-2026-98124?

A vulnerability exists in the Linux kernel SMB client operations where server-side range operations fail to invalidate the FS-Cache, leading to potential inconsistencies in data retrieval. Modifications made by functions such as smb3_zero_range, smb3_punch_hole, smb3_insert_range, and smb3_collapse_range can leave outdated cached data available for reads after file modifications. This issue is addressed by ensuring FS-Cache is invalidated promptly after outstanding I/O completes, preventing stale data from being returned. Users are encouraged to apply updates to mitigate this vulnerability.

References