Linux Kernel Vulnerability Affecting Module Loading Functionality

CVE-2026-98842

What is CVE-2026-98842?

A vulnerability in the Linux kernel module handling mechanism can lead to improper error reporting during the execution of the codetag_load_module() function. When this function fails, it does not set the error code appropriately, which causes the load_module() function to incorrectly return a success status after the module has been removed. Moreover, if a livepatch module encounters this error, it can result in a memory leak due to unhandled allocations from mod->klp_info. This issue has been addressed in subsequent kernel updates, enhancing the overall reliability and security of the module loading process.

References