9p: Fix v9fs_issue_write() to update i_size and remote_i_size

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-98267
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-10-06 09:18:16 UTC
Updated2026-10-06 09:18:16 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix v9fs_issue_write() to update i_size and remote_i_size to the new size of the server file if we made it larger, using the start fpos and the count returned by p9_client_write() to calculate the new minimum file size. This assumes that if the 9P server makes a short write (say it hits ENOSPC), a reduced count is returned.

Risk And Classification

EPSS: 0.001750000 probability, percentile 0.063810000 (date 2026-10-06)

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 5fb70e7275a61dd404f684370e1add7fe0ebe9c5 aeb1fe55583836744aef11fbfa2a09122aa9816c git Not specified
CNA Linux Linux affected 5fb70e7275a61dd404f684370e1add7fe0ebe9c5 88871ab548c1d7b11cde9b04063f3c1c6fbd7039 git Not specified
CNA Linux Linux affected 5fb70e7275a61dd404f684370e1add7fe0ebe9c5 9cd92e3392bdd14568e9e44aec1ac05e1fcd62e5 git Not specified
CNA Linux Linux affected 5fb70e7275a61dd404f684370e1add7fe0ebe9c5 c60ae98c5aa64021751b38ab1313b19d620bf640 git Not specified
CNA Linux Linux affected 6.10 Not specified
CNA Linux Linux unaffected 6.10 semver Not specified
CNA Linux Linux unaffected 6.12.112 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.54 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.8 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3-rc4 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/9cd92e3392bdd14568e9e44aec1ac05e1fcd62e5 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/88871ab548c1d7b11cde9b04063f3c1c6fbd7039 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/c60ae98c5aa64021751b38ab1313b19d620bf640 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/aeb1fe55583836744aef11fbfa2a09122aa9816c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report