CVE-2026-98686

CVE-2026-98686

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
5.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb: client: discard post-EOF pagecache when extending a file via zero range

smb3_zero_range() removed the pagecache only for the range being zeroed,

so when it extends the file the folio straddling the old EOF - which may

hold data dirtied past EOF through an mmap - was never dropped and became

visible as file content once the file was extended.

Lower the discard boundary to the smaller of the zero-range offset and the

old EOF.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.8th percentile
Published
2026-10-18T20:17Z
References (5)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:45Z
    smb: client: discard post-EOF pagecache when extending a file via zero range
    cvelistv5
  • 18 OCT 15:45Z
    smb: client: discard post-EOF pagecache when extending a file via zero range
    cvelistv5