CVE-2026-97610

Source
https://cve.org/CVERecord?id=CVE-2026-97610
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97610.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97610
Downstream
Related
Published
2026-09-25T10:22:20Z
Modified
2026-10-09T17:26:55Z
Summary
netfs: Fix uninitialized return value in netfs_unbuffered_write()
Details

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix uninitialized return value in netfs_unbuffered_write()

If preparation of the first subrequest fails, netfs_unbuffered_write() exits its loop before ret is initialized. The empty-iterator check can do the same.

For synchronous writes, netfs_unbuffered_write_iter_locked() may then return an unrelated error instead of wreq->error. This is reachable through CIFS if cifs_prepare_write() fails to reopen the file or obtain credits.

Initialize ret to 0 so the caller returns wreq->error if no data was written, or the number of bytes already written otherwise.

Found with Clang's -Wconditional-uninitialized.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97610.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
72d08d2839649d1c5efbe375751f4473fa4486af
Fixed
3d038eebdbd400c3bc4b66bd8aa0dff0c2bcce26
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a0b4c7a49137ed21279f354eb59f49ddae8dffc2
Fixed
2e38d500471d097cda87d7d374bbc1b13493075d
Fixed
f18e8774f4d3137fa0a5fb8ffa83d59a719666d8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.18.17
Fixed
6.18.53
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.19.7
Fixed
6.20
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0c29f6d63122a0168d67cb8ecde5b4cf7fe4acb0

Affected versions

v6.*
v6.18.17
v6.18.18
v6.18.19
v6.18.20
v6.18.21
v6.18.22
v6.18.23
v6.18.24
v6.18.25
v6.18.26
v6.18.27
v6.18.28
v6.18.29
v6.18.30
v6.18.31
v6.18.32
v6.18.33
v6.18.34
v6.18.35
v6.18.36
v6.18.37
v6.18.38
v6.18.39
v6.18.40
v6.18.41
v6.18.42
v6.18.43
v6.18.44
v6.18.45
v6.18.46
v6.18.47
v6.18.48
v6.18.49
v6.18.50
v6.18.51
v6.18.52
v6.19.10
v6.19.11
v6.19.12
v6.19.13
v6.19.14
v6.19.7
v6.19.8
v6.19.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97610.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.18.53
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97610.json"