What’s Vulnerable › Vulnerabilities

CVE-2026-98267: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-06 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix v9fs_issue_write() to update i_size and remote_i_size to the new size of the server file if we made it larger, using the start fpos and the count returned by p9_client_write() to calculate the new minimum file size. This assumes that if the 9P server makes a short write (say it hits ENOSPC), a reduced count is returned.

Affected products

• Linux kernel: 6.10 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/88871ab548c1d7b11cde9b04063f3c1c6fbd7039
• https://git.kernel.org/stable/c/9cd92e3392bdd14568e9e44aec1ac05e1fcd62e5
• https://git.kernel.org/stable/c/aeb1fe55583836744aef11fbfa2a09122aa9816c
• https://git.kernel.org/stable/c/c60ae98c5aa64021751b38ab1313b19d620bf640

Get alerted when CVE-2026-98267 or the next vulnerability affects your stack