Linux Kernel Vulnerability Affecting NetFS Implementation

CVE-2026-98843

What is CVE-2026-98843?

A vulnerability in the Linux kernel's netfs implementation could lead to data integrity issues by leaving gaps during streaming writes. Specifically, the netfs_read_gaps function fails to appropriately handle dirty regions, resulting in stale data being written back after read operations. The flaw arises when gaps remain around a write's dirty region that were not acknowledged by the server, potentially leading to unwanted data persistence. This issue has been addressed to ensure that gaps are properly zeroed only after read operations are complete, thus improving data consistency and system reliability.

References