Input Validation Issue in Linux Kernel sysctl Component
CVE-2026-98434
Currently unrated
What is CVE-2026-98434?
A vulnerability has been identified in the Linux kernel's sysctl component stemming from an inadequate range check within the do_proc_int_conv_ms_jiffies_minmax function. This oversight allowed the default checks to be bypassed, which could lead to unexpected behavior when processing integer values associated with time measurement. Proper validation checks are essential to prevent potential exploitation that might occur through misconfigured parameters or erroneous input, leading to unwarranted system states.
Affected Version(s)
Linux d174174c6776a340f5c25aab1ac47a2dd950f380 < 1c23dba51dbf7e86c7c2e617c964be1411329cb4
Linux d174174c6776a340f5c25aab1ac47a2dd950f380 < 82431877d837a6c2593efd8e66ba28b35a220ca4
Linux 7.0