CVE-2026-98224EPSS p6.2%
CVE-2026-98224CVE-2026-98224
Description
In the Linux kernel, the following vulnerability has been resolved:
mm/vma: correctly unaccount on mmap_prepare() failure
__mmap_setup() accounts memory for relevant mappings via:
security_vm_enough_memory_mm()
-> __vm_enough_memory()
-> vm_acct_memory()
If __mmap_setup() fails, this indicates that this accounting did not take
place, and thus it's appropriate for __mmap_region() to jump to
abort_munmap.
However if call_mmap_prepare() fails, it also jumps there and any accounted
memory is not correctly unaccounted.
Fix this by handling each error separately.
Scoring
| EPSS | 0.17% probability of exploitation · percentile 6.2% · 2026-10-10T12:00:23Z |
| Last modified | 2026-10-06 |