CVE-2026-80898 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: netfs: clear PG_private_2 on copy-to-cache append failure netfs_pgpriv2_copy_to_cache() marks the folio with PG_private_2 before netfs_pgpriv2_copy_folio() appends it to the copy-to-cache rolling buffer. If the append fails, the folio is not queued for cache writeback, so the PG_private_2 state and its reference must be released immediately.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e
https://git.kernel.org/stable/c/627826ef4208042b0470d1a3fdb729ce35471a0d
https://git.kernel.org/stable/c/a81fc9266e1c5fef9ccf675a9b44b2f4ab464923

History

Fri, 04 Sep 2026 21:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-404

Fri, 04 Sep 2026 17:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: netfs: clear PG_private_2 on copy-to-cache append failure netfs_pgpriv2_copy_to_cache() marks the folio with PG_private_2 before netfs_pgpriv2_copy_folio() appends it to the copy-to-cache rolling buffer. If the append fails, the folio is not queued for cache writeback, so the PG_private_2 state and its reference must be released immediately.
Title		netfs: clear PG_private_2 on copy-to-cache append failure
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e https://git.kernel.org/stable/c/627826ef4208042b0470d1a3fdb729ce35471a0d https://git.kernel.org/stable/c/a81fc9266e1c5fef9ccf675a9b44b2f4ab464923

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-04T17:11:13.337Z

Updated: 2026-09-04T17:11:13.337Z

Reserved: 2026-08-26T14:34:25.800Z

Link: CVE-2026-80898

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-04T18:17:58.067

Modified: 2026-09-04T18:17:58.067

Link: CVE-2026-80898

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-80898", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-26T14:34:25.800Z", "datePublished": "2026-09-04T17:11:13.337Z", "dateUpdated": "2026-09-04T17:11:13.337Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-04T17:11:13.337Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: clear PG_private_2 on copy-to-cache append failure\n\nnetfs_pgpriv2_copy_to_cache() marks the folio with PG_private_2 before\nnetfs_pgpriv2_copy_folio() appends it to the copy-to-cache rolling\nbuffer.\n\nIf the append fails, the folio is not queued for cache writeback, so\nthe PG_private_2 state and its reference must be released immediately."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/netfs/read_pgpriv2.c"], "versions": [{"version": "e2d46f2ec332533816417b60933954173f602121", "lessThan": "627826ef4208042b0470d1a3fdb729ce35471a0d", "status": "affected", "versionType": "git"}, {"version": "e2d46f2ec332533816417b60933954173f602121", "lessThan": "614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e", "status": "affected", "versionType": "git"}, {"version": "e2d46f2ec332533816417b60933954173f602121", "lessThan": "a81fc9266e1c5fef9ccf675a9b44b2f4ab464923", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/netfs/read_pgpriv2.c"], "versions": [{"version": "6.14", "status": "affected"}, {"version": "0", "lessThan": "6.14", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.44", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.8", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.14", "versionEndExcluding": "6.18.44"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.14", "versionEndExcluding": "7.1.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.14", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/627826ef4208042b0470d1a3fdb729ce35471a0d"}, {"url": "https://git.kernel.org/stable/c/614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e"}, {"url": "https://git.kernel.org/stable/c/a81fc9266e1c5fef9ccf675a9b44b2f4ab464923"}], "title": "netfs: clear PG_private_2 on copy-to-cache append failure", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/netfs/read_pgpriv2.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "627826ef4208042b0470d1a3fdb729ce35471a0d", "status": "affected", "version": "e2d46f2ec332533816417b60933954173f602121", "versionType": "git"}, {"lessThan": "614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e", "status": "affected", "version": "e2d46f2ec332533816417b60933954173f602121", "versionType": "git"}, {"lessThan": "a81fc9266e1c5fef9ccf675a9b44b2f4ab464923", "status": "affected", "version": "e2d46f2ec332533816417b60933954173f602121", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/netfs/read_pgpriv2.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.14"}, {"lessThan": "6.14", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.44", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: clear PG_private_2 on copy-to-cache append failure\n\nnetfs_pgpriv2_copy_to_cache() marks the folio with PG_private_2 before\nnetfs_pgpriv2_copy_folio() appends it to the copy-to-cache rolling\nbuffer.\n\nIf the append fails, the folio is not queued for cache writeback, so\nthe PG_private_2 state and its reference must be released immediately."}], "id": "CVE-2026-80898", "lastModified": "2026-09-04T18:17:58.067", "metrics": {}, "published": "2026-09-04T18:17:58.067", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/627826ef4208042b0470d1a3fdb729ce35471a0d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a81fc9266e1c5fef9ccf675a9b44b2f4ab464923"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}