CVE-2026-98686

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3_zero_range() removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data dirtied past EOF through an mmap - was never dropped and became visible as file content once the file was extended. Lower the discard boundary to the smaller of the zero-range offset and the old EOF.

Is your site exposed to CVE-2026-98686?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0017

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/3df27277f8f95345d4a6c57367824bf1aefdbf66 https://git.kernel.org/stable/c/6a8279c98ad289b27c0bdb11adb3f0c0b7fd456d https://git.kernel.org/stable/c/94949b6b2f2bf0dba2e8786aed0b08cc6bc3a183 https://git.kernel.org/stable/c/b75dadb50a25eed525264bf6fea44fad94e7626f https://git.kernel.org/stable/c/da4fe97fb6c730d9c94a115c7bfa6f98e0d578d0

Frequently Asked Questions

What is CVE-2026-98686? +

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3_zero_range() removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data dirtied past EOF through an mmap - was never dropped and became visible as file content once the file was extended. Lower the discard boundary to the smaller of the zero-range offset and the old EOF.

How do I check if I'm vulnerable to CVE-2026-98686? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.