Unscored

CVE-2026-98902md/raid5: let stripe batch bm_seq comparison wrap-safe

Linux Linux Published: 2026-10-23 14:54 (22 days ago)

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm_seq comparison wrap-safe Once the 32-bit seq wraps, a newer bm_seq can look smaller than old, so .. covert to wrap-safe calculate way.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Linux	Linux	4.1
linux	linux kernel	4.1 – < 5.10.271

Ubuntu fixes

USN-9091-1 Linux kernel (NVIDIA Tegra) vulnerabilities Ubuntu 24.04 · 13.11.2026 · linux-nvidia-tegra
USN-9066-1 Linux kernel (HWE) vulnerabilities Ubuntu 22.04 · 12.11.2026 · linux-hwe-6.8
USN-8961-1 Linux kernel vulnerabilities Ubuntu 22.04, 20.04 · 03.11.2026 · linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure,...
USN-8963-1 Linux kernel (NVIDIA Tegra) vulnerabilities Ubuntu 22.04, 20.04 · 03.11.2026 · linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx
USN-8959-1 Linux kernel vulnerabilities Ubuntu 26.04, 24.04 · 03.11.2026 · linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle
USN-8960-1 Linux kernel (OEM) vulnerabilities Ubuntu 26.04 · 03.11.2026 · linux-oem-7.0

References and patches

CVSS score

Not scored yet. It appears here once the CNA, CISA or NVD scores it.

EPSS (chance of exploitation in 30 days)

0.18%

higher than 8% of all CVEs

Timeline

ID reserved2026-09-25
Published2026-10-23 14:54
Reached IP-DB2026-10-24 23:49
Last updated2026-10-26 10:17

Assigned by (CNA): Linux
NVD status: Received

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Ubuntu 20.04 LTS

High

CVE-2026-106023 3 days ago

Apache HTTP Server: mod_md NULL pointer dereference leads to child process crash

Apache Software Foundation Apache HTTP Server

NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69.

Low

CVE-2026-109163 3 days ago

Apache HTTP Server: mod_vhost_alias 1 byte stack buffer overwrite (after CVE-2026-63292)

Apache Software Foundation Apache HTTP Server

Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292) This issue affects Apache HTTP Server: 2.4.69.

8.1High

CVE-2026-119618 3 days ago

Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers

Apache Software Foundation Apache HTTP Server

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2 from …

1.3%EPSS

7.7High

CVE-2026-109518 10 days ago

APT RCE via hard link reuse

Debian APT; Ubuntu APT

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into install…

Unscored

CVE-2026-98912 22 days ago

ALSA: seq: oss: Reject reads that cannot fit the next event

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_oss_read() checks whether the next queued OSS sequencer event fits in the remaining userspace buffer before removing it f…

7.5High

CVE-2026-98911 22 days ago

dpaa2-switch: fix the error path in dpaa2_switch_rx()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect sinc…