Vulnerability in Linux

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix v9fs_issue_write() to update i_size and remote_i_size to the new size of the server file if we made it larger, using the start fpos and the count returned by p9_client_write() to calculate the new minimum file size. This assumes that if the 9P server makes a short write (say it hits ENOSPC), a reduced count is returned.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund5 Oct 2026WID-SEC-2026-3743

  Linux Kernel: Multiple vulnerabilities Translated from German

  Risk mediumCVE-2026-98221CVE-2026-98181CVE-2026-98248+204 more CVEs

[ References ]References

• git.kernel.org/stable/c/88871ab548c1d7b11cde9b04063f3c1c6fbd7039
• git.kernel.org/stable/c/9cd92e3392bdd14568e9e44aec1ac05e1fcd62e5
• git.kernel.org/stable/c/aeb1fe55583836744aef11fbfa2a09122aa9816c
• git.kernel.org/stable/c/c60ae98c5aa64021751b38ab1313b19d620bf640