CVE-2026-98224: Linux kernel · mm/vma: correctly unaccount on mmap_prepare() failure
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in fb5400bff669c8bad3d4ec09287d9b461e89e5f1 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 17:16 UTC
Rated by Threat Radar · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in fb5400bff669c8bad3d4ec09287d9b461e89e5f1, 8fdc521d438fbf0d22c13d51d55d5dd82d7202b2, 6cc27d82196385fe06853319f74312a7d8019726
Exploitation evidence
Disclosed: evidence found.
CVE published 6 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to fb5400bff669c8bad3d4ec09287d9b461e89e5f1, 8fdc521d438fbf0d22c13d51d55d5dd82d7202b2 or 6cc27d82196385fe06853319f74312a7d8019726.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available in the specified commits that correctly handle memory unaccounting on mmap_prepare() failure. Users should update Linux kernel version 6.16 to a fixed version containing these commits to remediate the vulnerability.
Description
A vulnerability in the Linux kernel's memory management subsystem (mm/vma) was identified where memory accounting is not properly reversed on mmap_prepare() failure. This flaw occurs because the function call_mmap_prepare() failure leads to an abort path that does not correctly unaccount previously accounted memory, potentially causing inconsistencies in memory usage tracking. The issue affects Linux kernel version 6.16 and has been fixed in subsequent commits.