{"id":"CVE-2026-98223","revision":"545e9e86bbc74913ad765d980f81251d","records":[{"revision":"545e9e86bbc74913ad765d980f81251d","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98223","aliases":[],"title":"mm: filemap: retain mapped dropbehind folios","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm: filemap: retain mapped dropbehind folios\n\nFault-around can map ready dropbehind folios without going through the\nnormal page-cache lookup that clears dropbehind.  A mapping represents a\ncompeting cached user, so retain the folio instead of forcibly unmapping\nit when writeback completes.\n\nFor a mapped folio, folio_unmap_invalidate() can call\nunmap_mapping_folio(), which takes i_mmap_rwsem and may sleep.  Retaining\nmapped folios avoids this path when folio_end_dropbehind() runs in\nnon-preemptible task context.\n\nTal was able to trigger a sleeping-in-atomic warning due to this [1].\n\nUnmapped dropbehind folios continue through the existing invalidation path.","state":0,"publishedAt":"2026-10-06T08:44:58.472+00:00","modifiedAt":"2026-10-19T09:15:55.143+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"mm/filemap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"fb7d3bc4149395c1ae99029c852eab6c28fc3c88\",\n                            \"lessThan\": \"2897601dffe576fcd87a4259102f41f7fb0cbfc8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fb7d3bc4149395c1ae99029c852eab6c28fc3c88\",\n                            \"lessThan\": \"77c0fade37c80e8aa16ac048a9828249055e3f66\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fb7d3bc4149395c1ae99029c852eab6c28fc3c88\",\n                            \"lessThan\": \"848d2ce2fce15fbdc083fbf9691bfa72911033c4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"mm/filemap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.14\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.54\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.8\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/2897601dffe576fcd87a4259102f41f7fb0cbfc8","https://git.kernel.org/stable/c/77c0fade37c80e8aa16ac048a9828249055e3f66","https://git.kernel.org/stable/c/848d2ce2fce15fbdc083fbf9691bfa72911033c4"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98223","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98223","identifiers":["CVE-2026-98223"]},"retained":false,"historicalAffected":[]}],"coverage":[]}