Linux Kernel Vulnerability in dm-pcache Affects Persistent Memory Access

CVE-2026-98867

What is CVE-2026-98867?

A vulnerability in the Linux kernel's dm-pcache module allows improper validation of logical key offsets from persistent memory. Specifically, the cache_key_decode() function may use an invalid key after it processes an offset that exceeds the device size, leading to subtree pointers that fall outside the intended range. This could potentially result in unexpected behaviors or system instability, highlighting the importance of validating key lengths and offsets prior to usage.

References