CVE-2026-98842

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-98842

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-98842

Downstream

Published

2026-10-18T15:50:19Z

Modified

2026-10-20T02:30:36Z

Summary

module: fix lost error code from codetag_load_module()

Details

In the Linux kernel, the following vulnerability has been resolved:

module: fix lost error code from codetag_load_module()

If codetag_load_module() fails, err is not set to reflect the failure and load_module() returns 0 after the module has been torn down.

Also, if the module is a livepatch, mod->klp_info allocated by copy_module_elf() leaks on this error path. Free it via a new livepatch_cleanup label.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98842.json"
}

References

Affected packages

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

044d2aee6c575231ed4a24fb3d119bad0937488b

Fixed

258310d59a82ea4854bfd9138682bbaac1153b19

Fixed

bfc721eef5c13704efe6864c7da2ad4b0d75f60a

Fixed

c79cf15eb35a4c703bf18f8c33c47e80dd660f8e

v6.*

v6.15.10

v6.15.11

v6.15.4

v6.15.5

v6.15.6

v6.15.7

v6.15.8

v6.15.9

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98842.json"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98842.json"