{"id":"CVE-2026-98686","title":"smb: client: discard post-EOF pagecache when extending a file via zero range","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: discard post-EOF pagecache when extending a file via zero range\n\nsmb3_zero_range() removed the pagecache only for the range being zeroed,\nso when it extend…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 72c419d9b073628d3b5b0b2fc787b724f1a8c726 < 94949b6b2f2bf0dba2e8786aed0b08cc6bc3a183","Linux >= 72c419d9b073628d3b5b0b2fc787b724f1a8c726 < b75dadb50a25eed525264bf6fea44fad94e7626f","Linux >= 72c419d9b073628d3b5b0b2fc787b724f1a8c726 < 6a8279c98ad289b27c0bdb11adb3f0c0b7fd456d","Linux >= 72c419d9b073628d3b5b0b2fc787b724f1a8c726 < da4fe97fb6c730d9c94a115c7bfa6f98e0d578d0","Linux 5.1"],"published":"2026-10-18","updated":"2026-10-19","sourceUpdated":"2026-10-19T09:23:56.409Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98686","references":[{"url":"https://git.kernel.org/stable/c/94949b6b2f2bf0dba2e8786aed0b08cc6bc3a183"},{"url":"https://git.kernel.org/stable/c/b75dadb50a25eed525264bf6fea44fad94e7626f"},{"url":"https://git.kernel.org/stable/c/6a8279c98ad289b27c0bdb11adb3f0c0b7fd456d"},{"url":"https://git.kernel.org/stable/c/da4fe97fb6c730d9c94a115c7bfa6f98e0d578d0"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T16:47:32.519Z","slug":"CVE-2026-98686","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: discard post-EOF pagecache when extending a file via zero range\n\nsmb3_zero_range() removed the pagecache only for the range being zeroed,\nso when it extends the file the folio straddling the old EOF - which may\nhold data dirtied past EOF through an mmap - was never dropped and became\nvisible as file content once the file was extended.\n\nLower the discard boundary to the smaller of the zero-range offset and the\nold EOF.\n\n## Affected\n\n- `Linux >= 72c419d9b073628d3b5b0b2fc787b724f1a8c726 < 94949b6b2f2bf0dba2e8786aed0b08cc6bc3a183`\n- `Linux >= 72c419d9b073628d3b5b0b2fc787b724f1a8c726 < b75dadb50a25eed525264bf6fea44fad94e7626f`\n- `Linux >= 72c419d9b073628d3b5b0b2fc787b724f1a8c726 < 6a8279c98ad289b27c0bdb11adb3f0c0b7fd456d`\n- `Linux >= 72c419d9b073628d3b5b0b2fc787b724f1a8c726 < da4fe97fb6c730d9c94a115c7bfa6f98e0d578d0`\n- `Linux 5.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}