Input Validation Issue in Linux Kernel sysctl Component
CVE-2026-98434

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
18 October 2026

What is CVE-2026-98434?

A vulnerability has been identified in the Linux kernel's sysctl component stemming from an inadequate range check within the do_proc_int_conv_ms_jiffies_minmax function. This oversight allowed the default checks to be bypassed, which could lead to unexpected behavior when processing integer values associated with time measurement. Proper validation checks are essential to prevent potential exploitation that might occur through misconfigured parameters or erroneous input, leading to unwarranted system states.

Affected Version(s)

Linux d174174c6776a340f5c25aab1ac47a2dd950f380 < 1c23dba51dbf7e86c7c2e617c964be1411329cb4

Linux d174174c6776a340f5c25aab1ac47a2dd950f380 < 82431877d837a6c2593efd8e66ba28b35a220ca4

Linux 7.0

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.