CVE-2026-98686

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: discard post-EOF pagecache when extending a file via zero range

smb3_zero_range() removed the pagecache only for the range being zeroed,

so when it extends the file the folio straddling the old EOF - which may

hold data dirtied past EOF through an mmap - was never dropped and became

visible as file content once the file was extended.

Lower the discard boundary to the smaller of the zero-range offset and the

old EOF.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References