CVE-2026-98388

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-98388

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98388.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-98388

Downstream

DEBIAN-CVE-2026-98388

Published

2026-10-14T13:25:52Z

Modified

2026-10-15T02:47:42Z

Summary

exec: do_close_on_exec() before taking exec_update_lock

Details

In the Linux kernel, the following vulnerability has been resolved:

exec: do_close_on_exec() before taking exec_update_lock

do_close_on_exec() currently happens while holding the exec_update_lock, which is used in a lot of places that access process state to synchronize access checks. I recently added another such use of exec_update_lock, causing a regression.

do_close_on_exec() can block waiting for a reply from a filesystem. That means a hung filesystem can block codepaths that use exec_update_lock; and it also means that a FUSE filesystem which attempts to inspect the calling process can deadlock.

To avoid such problems, move do_close_on_exec() before the exec_update_lock is taken, but after the FD table has been copied if necessary.

I have looked through all the calls between the old and new position of the do_close_on_exec() call; there seems to be no file descriptor table access in between.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98388.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

ae1e630bcaac739f625822078edbaea98366930d

Fixed

955973fff4a36d39a848b00cac1706863f568fe1

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

d54f14655fd7d7b293698a8b6918563c4c0465e7

Fixed

550feab5b01000ab314868b62211fb3ddfd600e8

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

bb43679356f1f2a4c6b1c88aec4f021e5b5c74e9

Fixed

5aacc19ba2b1faf84c4a2f2cf9a1784e03d1ff38

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

7456ae990a9738962b33146916fabca62ae3d4e0

Fixed

3feb4020bfb7ccf0d347f27051639d25e19cd65d

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

4bfe8c481846cee52473a2f7d7b30ee8e6749fc4

Fixed

0d86cd6b709c39216e6ee5ea8f0fc4242bbb2b53

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

f9b4b03ccc9c69bf7f7298d4559906ebea7143b3

Fixed

19ddef61ee0a49782a60f8f497e50597ad5de2da

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6650527444dadc63d84aa939d14ecba4fadb2f69

Fixed

63be3d8511bdafa095cd14a393cbf3c58dbbb928

Fixed

e780259b54e618ceb4763fbc21314acf3565e813

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.10.261

Fixed

5.10.271

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

5.15.212

Fixed

5.15.222

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.1.178

Fixed

6.1.189

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.6.145

Fixed

6.6.158

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.12.97

Fixed

6.12.111

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.18.40

Fixed

6.18.53

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

7.1.4

Fixed

7.2

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

c1cfd63326f5d09999134e9052c353faf738286e

Affected versions

v5.*

v5.10.261

v5.10.262

v5.10.263

v5.10.264

v5.10.265

v5.10.266

v5.10.267

v5.10.268

v5.10.269

v5.10.270

v5.15.212

v5.15.213

v5.15.214

v5.15.215

v5.15.216

v5.15.217

v5.15.218

v5.15.219

v5.15.220

v5.15.221

v6.*

v6.1.178

v6.1.179

v6.1.180

v6.1.181

v6.1.182

v6.1.183

v6.1.184

v6.1.185

v6.1.186

v6.1.187

v6.1.188

v6.12.100

v6.12.101

v6.12.102

v6.12.103

v6.12.104

v6.12.105

v6.12.106

v6.12.107

v6.12.108

v6.12.109

v6.12.110

v6.12.97

v6.12.98

v6.12.99

v6.18.40

v6.18.41

v6.18.42

v6.18.43

v6.18.44

v6.18.45

v6.18.46

v6.18.47

v6.18.48

v6.18.49

v6.18.50

v6.18.51

v6.18.52

v6.6.145

v6.6.146

v6.6.147

v6.6.148

v6.6.149

v6.6.150

v6.6.151

v6.6.152

v6.6.153

v6.6.154

v6.6.155

v6.6.156

v6.6.157

v7.*

v7.1.10

v7.1.11

v7.1.12

v7.1.13

v7.1.4

v7.1.5

v7.1.6

v7.1.7

v7.1.8

v7.1.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98388.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.10.271

Type: ECOSYSTEM
Events: Introduced

5.11.0

Fixed

5.15.222

Type: ECOSYSTEM
Events: Introduced

5.16.0

Fixed

6.1.189

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.158

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.111

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.53

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.2.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98388.json"