Linux Kernel SMB Client Stale Data Vulnerability

CVE-2026-98125

What is CVE-2026-98125?

In the Linux kernel, a vulnerability exists within the SMB client that leads to the exposure of stale data due to improper handling of the page cache during insert or collapse range operations. When the parameters off or old_eof are not page-aligned, boundary pages may only be partially zeroed, preventing the complete invalidation of the page cache. Consequently, this flawed handling can result in a client returning outdated data after operations intended to update the cache. Users of affected Linux kernel versions are advised to update to resolve this issue and ensure data integrity.

References