CVE-2026-98902md/raid5: let stripe batch bm_seq comparison wrap-safe
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm_seq comparison wrap-safe Once the 32-bit seq wraps, a newer bm_seq can look smaller than old, so .. covert to wrap-safe calculate way.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 26, 2026
- First seen by InfoSec Signals
- Oct 23, 2026
Affected products
Linux Linux linux:linux (from the name) | from 2b6b24574256c05be145936f1493aec74c6904e5 before 647c7289a3960118e249c0a53da6f1ebba1e47a3; from 2b6b24574256c05be145936f1493aec74c6904e5 before ffdd3aee932fc293456678f6b0200ffe9bf12a6d; from 2b6b24574256c05be145936f1493aec74c6904e5 before 628b14d0744bd5dfe176ea93559071cdcde14255; from 2b6b24574256c05be145936f1493aec74c6904e5 before 2fdc51228d9a8cad2d727d5aef732cc66fc6d56e; from 2b6b24574256c05be145936f1493aec74c6904e5 before c5c89e1a872a84019f674f5107111e6e6b7cc30f; from 2b6b24574256c05be145936f1493aec74c6904e5 before cc8eb1715673de850f14376782151f68f73ae3ce; 2b6b24574256c05be145936f1493aec74c6904e5 builds before 00e93faf4cea9e8802ac5dfee0952d84fc95c40f | CNA record |
References
- https://git.kernel.org/stable/c/647c7289a3960118e249c0a53da6f1ebba1e47a3
- https://git.kernel.org/stable/c/ffdd3aee932fc293456678f6b0200ffe9bf12a6d
- https://git.kernel.org/stable/c/628b14d0744bd5dfe176ea93559071cdcde14255
- https://git.kernel.org/stable/c/2fdc51228d9a8cad2d727d5aef732cc66fc6d56e
- https://git.kernel.org/stable/c/c5c89e1a872a84019f674f5107111e6e6b7cc30f
- https://git.kernel.org/stable/c/cc8eb1715673de850f14376782151f68f73ae3ce
- https://git.kernel.org/stable/c/00e93faf4cea9e8802ac5dfee0952d84fc95c40f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.