{"id":"CVE-2026-98157","revision":"7a0d354012ff47f182efabc430a16851","records":[{"revision":"7a0d354012ff47f182efabc430a16851","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98157","aliases":[],"title":"EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation\n\nThe poll_msec sysfs store file uses simple_strtoul() which accepts an unsigned\nlong, but the target field (poll_msec) is unsigned int. On 64-bit systems,\na value > UINT_MAX is silently truncated when stored.\n\nFix the mismatch by using kstrtouint() instead. This rejects values larger\nthan UINT_MAX at parse time, making truncation impossible. Also add a check\nfor value < 1 to reject the 0-delay case, which would cause the poll work to\nspin without delay and consume 100% CPU.","state":0,"publishedAt":"2026-09-25T10:36:27.009+00:00","modifiedAt":"2026-10-19T09:14:51.107+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/edac/edac_device_sysfs.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"e27e3dac651771fe3250f6305dee277bce29fc5d\",\n                            \"lessThan\": \"a60794ee3f453516ab3ed212ba0295ecf890bc8c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e27e3dac651771fe3250f6305dee277bce29fc5d\",\n                            \"lessThan\": \"f856511058c8cb470d6c6c7ce908870adcdc7dc6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e27e3dac651771fe3250f6305dee277bce29fc5d\",\n                            \"lessThan\": \"656e2fe98ac452db4e5b8147d1f33b8c35b4ec4b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e27e3dac651771fe3250f6305dee277bce29fc5d\",\n                            \"lessThan\": \"541fc6f733b32463cf23277637bb07e2aaa00b53\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e27e3dac651771fe3250f6305dee277bce29fc5d\",\n                            \"lessThan\": \"ea01c061d839b520f385f112908de1c6e3391327\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e27e3dac651771fe3250f6305dee277bce29fc5d\",\n                            \"lessThan\": \"528052af901d6e6bbfa0e52362a70a58a5dd1e43\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e27e3dac651771fe3250f6305dee277bce29fc5d\",\n                            \"lessThan\": \"0e022ee4f8e0dc843ba4c80bb75408a7704279af\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e27e3dac651771fe3250f6305dee277bce29fc5d\",\n                            \"lessThan\": \"66cc9dec919dd63d8e4b3d386f7aed3ae684e645\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/edac/edac_device_sysfs.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.23\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.23\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.271\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.222\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.111\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.53\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.7\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/a60794ee3f453516ab3ed212ba0295ecf890bc8c","https://git.kernel.org/stable/c/f856511058c8cb470d6c6c7ce908870adcdc7dc6","https://git.kernel.org/stable/c/656e2fe98ac452db4e5b8147d1f33b8c35b4ec4b","https://git.kernel.org/stable/c/541fc6f733b32463cf23277637bb07e2aaa00b53","https://git.kernel.org/stable/c/ea01c061d839b520f385f112908de1c6e3391327","https://git.kernel.org/stable/c/528052af901d6e6bbfa0e52362a70a58a5dd1e43","https://git.kernel.org/stable/c/0e022ee4f8e0dc843ba4c80bb75408a7704279af","https://git.kernel.org/stable/c/66cc9dec919dd63d8e4b3d386f7aed3ae684e645"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98157","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98157","identifiers":["CVE-2026-98157"]},"retained":false,"historicalAffected":[]}],"coverage":[]}