Linux Kernel Vulnerability Affects Cache Management

CVE-2026-98868

What is CVE-2026-98868?

A vulnerability in the Linux kernel's dm-pcache component can cause improper handling of cache segments due to insufficient input validation. This issue arises in the cache_replay(), writeback worker, and GC worker functions, where maliciously crafted input can result in exceeding the available segment space, ultimately triggering a BUG_ON condition. To mitigate this risk, the kernel now rejects any kset whose on-media size surpasses the remaining space in the cache segment before its utilization.

References