CVE-2026-98106: Linux kernel · drm/pagemap: Prevent double migration of device pages
Affects Linux kernelSource CVE Database V5
Not known to be exploited : upgrade to c4126f1db36e6b2e1c79b0e30a8a2de91c568f4c or 62451f540c46bf5c51143a1c8681b472608bd54d soon.
Data as of 26 Oct 2026, 17:16 UTC
Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 4% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in c4126f1db36e6b2e1c79b0e30a8a2de91c568f4c, 62451f540c46bf5c51143a1c8681b472608bd54d
Exploitation evidence
Disclosed: evidence found.
CVE published 25 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to c4126f1db36e6b2e1c79b0e30a8a2de91c568f4c or 62451f540c46bf5c51143a1c8681b472608bd54d.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available and has been applied in the Linux kernel commits identified by hashes c4126f1db36e6b2e1c79b0e30a8a2de91c568f4c and 62451f540c46bf5c51143a1c8681b472608bd54d. Users should update to a Linux kernel version including these fixes to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.
Description
CVE-2026-98106 is a vulnerability in the Linux kernel's drm/pagemap subsystem that could cause a soft lockup and RCU stall due to double migration of device-private folios. This occurs when a device-private folio migrated to system memory remains reachable and is selected for migration again before the first migration finalizes. The issue was fixed by marking migrated folios to prevent re-migration and adjusting migration handling logic.