CVE-2026-98918: Linux kernel · mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()
Affects Linux kernelSource CVE Database V5
Not known to be exploited : upgrade to f166586f74dd5d9cbadaabf86ef81c8ddf6cafa7 or d5208de0799c506d3315b6f96d034c38e4509dbb soon.
Data as of 26 Oct 2026, 17:30 UTC
Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in f166586f74dd5d9cbadaabf86ef81c8ddf6cafa7, d5208de0799c506d3315b6f96d034c38e4509dbb
Exploitation evidence
Disclosed: evidence found.
CVE published 23 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to f166586f74dd5d9cbadaabf86ef81c8ddf6cafa7 or d5208de0799c506d3315b6f96d034c38e4509dbb.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A patch is available and has been applied in the Linux kernel to fix this issue by ensuring that a page-aligned address is passed to the vulnerable function. Users should update to the fixed kernel versions identified by commits f166586f74dd5d9cbadaabf86ef81c8ddf6cafa7 and d5208de0799c506d3315b6f96d034c38e4509dbb. Since this is a Linux kernel vulnerability, remediation involves applying the official kernel updates. No additional mitigations are required beyond applying the patch.
Description
CVE-2026-98918 is a vulnerability in the Linux kernel's memory management subsystem (DAMON) where an unaligned address passed to a page table walk function can cause out-of-bounds writes. This occurs on arm64 architectures after a code change altered how page table entries are walked, potentially leading to writes beyond the intended page table page. The issue can cause kernel crashes or silent memory corruption depending on the memory protection of the adjacent page. The fix involves ensuring a page-aligned address is used in the vulnerable function.