Data Write Ordering Vulnerability in Linux Kernel Affecting NVDIMM Components

CVE-2026-98161

What is CVE-2026-98161?

This vulnerability in the Linux kernel pertains to the handling of NVDIMM components, specifically regarding the PREFLUSH operation before data writes. The issue arises when pmem_submit_bio() records a REQ_PREFLUSH error yet continues to process bio data, potentially leading to data integrity issues. By modifying the sequence to ensure that the REQ_PREFLUSH flush occurs synchronously before any bio data modifications, the kernel can effectively manage errors and uphold data consistency. The resolution retains asynchronous flush chaining for REQ_FUA, allowing smooth operational flow while managing flush errors properly.

References