{"id":"CVE-2026-98120","revision":"9e7f4c8fbe7f4aed80f20ff35042b6d0","records":[{"revision":"9e7f4c8fbe7f4aed80f20ff35042b6d0","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98120","aliases":[],"title":"netfs: Fix subreq ref leak","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix subreq ref leak\n\nFix a subrequest ref leak in netfs_unbuffered_write() in the event that\nsubreq->io_iter ends up zero length during preparation.","state":0,"publishedAt":"2026-09-25T10:36:04.129+00:00","modifiedAt":"2026-10-19T09:14:12.388+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/netfs/direct_write.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"72d08d2839649d1c5efbe375751f4473fa4486af\",\n                            \"lessThan\": \"ebefb12122d1319257ecac01c1a928f78007716a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a0b4c7a49137ed21279f354eb59f49ddae8dffc2\",\n                            \"lessThan\": \"0a573f4283a965a5e8716f621aec404cb4575328\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a0b4c7a49137ed21279f354eb59f49ddae8dffc2\",\n                            \"lessThan\": \"3c30087e27598d9d359763e8be9bd3017fe08348\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"0c29f6d63122a0168d67cb8ecde5b4cf7fe4acb0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.18.17\",\n                            \"lessThan\": \"6.18.53\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19.7\",\n                            \"lessThan\": \"6.20\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/netfs/direct_write.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"7.0\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.53\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.7\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/ebefb12122d1319257ecac01c1a928f78007716a","https://git.kernel.org/stable/c/0a573f4283a965a5e8716f621aec404cb4575328","https://git.kernel.org/stable/c/3c30087e27598d9d359763e8be9bd3017fe08348"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98120","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98120","identifiers":["CVE-2026-98120"]},"retained":false,"historicalAffected":[]}],"coverage":[]}