Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98686

smb: client: discard post-EOF pagecache when extending a file via zero range

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3_zero_range() removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data dirtied past EOF through an mmap - was never dropped and became visible as file content once the file was extended. Lower the discard boundary to the smaller of the zero-range offset and the old EOF.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 72c419d9b073628d3b5b0b2fc787b724f1a8c726 to < 3df27277f8f95345d4a6c57367824bf1aefdbf66affected
  • 72c419d9b073628d3b5b0b2fc787b724f1a8c726 to < 94949b6b2f2bf0dba2e8786aed0b08cc6bc3a183affected
  • 72c419d9b073628d3b5b0b2fc787b724f1a8c726 to < b75dadb50a25eed525264bf6fea44fad94e7626faffected
  • 72c419d9b073628d3b5b0b2fc787b724f1a8c726 to < 6a8279c98ad289b27c0bdb11adb3f0c0b7fd456daffected
  • 72c419d9b073628d3b5b0b2fc787b724f1a8c726 to < da4fe97fb6c730d9c94a115c7bfa6f98e0d578d0affected

Linux Linux

Default version status: affected

  • 5.1affected
  • 0 to < 5.1unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.113 to ≤ 6.12.*unaffected
  • 6.18.56 to ≤ 6.18.*unaffected
  • 7.2.10 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References