CVE-2026-98448

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98448", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.349Z", "datePublished": "2026-10-18T15:14:58.880Z", "dateUpdated": "2026-10-19T09:19:43.713Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:19:43.713Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: release orphanage dir inode if chown fails\n\nLOLLM points out that we leak the igrab'd reference to the orphanage\ndirectory inode if chowning it fails. Fix that."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/xfs/scrub/orphanage.c"], "versions": [{"version": "1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0", "lessThan": "6b66b1a59df6c3f9b4ad9b39a32ca86170ade357", "status": "affected", "versionType": "git"}, {"version": "1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0", "lessThan": "6a65a68097a1903988b256d5b367da7b0863a1d5", "status": "affected", "versionType": "git"}, {"version": "1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0", "lessThan": "f813aefd9e09c8cda38a71580b6a01552d97cade", "status": "affected", "versionType": "git"}, {"version": "1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0", "lessThan": "1c32cdc986467eaffeedb6c5334852809555b82d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/xfs/scrub/orphanage.c"], "versions": [{"version": "6.10", "status": "affected"}, {"version": "0", "lessThan": "6.10", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.55", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.9", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.18.55"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.2.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/6b66b1a59df6c3f9b4ad9b39a32ca86170ade357"}, {"url": "https://git.kernel.org/stable/c/6a65a68097a1903988b256d5b367da7b0863a1d5"}, {"url": "https://git.kernel.org/stable/c/f813aefd9e09c8cda38a71580b6a01552d97cade"}, {"url": "https://git.kernel.org/stable/c/1c32cdc986467eaffeedb6c5334852809555b82d"}], "title": "xfs: release orphanage dir inode if chown fails", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/xfs/scrub/orphanage.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6b66b1a59df6c3f9b4ad9b39a32ca86170ade357", "status": "affected", "version": "1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0", "versionType": "git"}, {"lessThan": "6a65a68097a1903988b256d5b367da7b0863a1d5", "status": "affected", "version": "1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0", "versionType": "git"}, {"lessThan": "f813aefd9e09c8cda38a71580b6a01552d97cade", "status": "affected", "version": "1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0", "versionType": "git"}, {"lessThan": "1c32cdc986467eaffeedb6c5334852809555b82d", "status": "affected", "version": "1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/xfs/scrub/orphanage.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.10"}, {"lessThan": "6.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.55", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: release orphanage dir inode if chown fails\n\nLOLLM points out that we leak the igrab'd reference to the orphanage\ndirectory inode if chowning it fails. Fix that."}], "id": "CVE-2026-98448", "lastModified": "2026-10-19T10:18:53.943", "metrics": {}, "published": "2026-10-18T16:16:55.140", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1c32cdc986467eaffeedb6c5334852809555b82d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6a65a68097a1903988b256d5b367da7b0863a1d5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6b66b1a59df6c3f9b4ad9b39a32ca86170ade357"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f813aefd9e09c8cda38a71580b6a01552d97cade"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: xfs: release orphanage dir inode if chown fails", "id": "2554874", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554874"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-911", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nxfs: release orphanage dir inode if chown fails\nLOLLM points out that we leak the igrab'd reference to the orphanage\ndirectory inode if chowning it fails. Fix that.", "A flaw was found in the Linux kernel's XFS file system. A local user could trigger an error during file system repair operations when changing ownership of an orphanage directory, causing the kernel to fail to release a reference to an inode (a data structure representing a file system object). This reference leak prevents resources from being properly reclaimed, which can lead to memory exhaustion and a denial of service (DoS)."], "name": "CVE-2026-98448", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98448\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98448\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98448.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0,6b66b1a59df6c3f9b4ad9b39a32ca86170ade357)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0,6a65a68097a1903988b256d5b367da7b0863a1d5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0,f813aefd9e09c8cda38a71580b6a01552d97cade)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0,1c32cdc986467eaffeedb6c5334852809555b82d)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.10"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.112,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.55,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.9,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc5,*)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T17:15:14.548377+00:00", "updated": "2026-10-20T12:45:15.239013+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-415", "CWE-911"]}