CVE-2026-98842

Source
https://cve.org/CVERecord?id=CVE-2026-98842
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98842.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98842
Downstream
Published
2026-10-18T15:50:19Z
Modified
2026-11-13T04:07:33Z
Summary
module: fix lost error code from codetag_load_module()
Details

In the Linux kernel, the following vulnerability has been resolved:

module: fix lost error code from codetag_load_module()

If codetag_load_module() fails, err is not set to reflect the failure and load_module() returns 0 after the module has been torn down.

Also, if the module is a livepatch, mod->klp_info allocated by copy_module_elf() leaks on this error path. Free it via a new livepatch_cleanup label.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98842.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
044d2aee6c575231ed4a24fb3d119bad0937488b
Fixed
258310d59a82ea4854bfd9138682bbaac1153b19
Fixed
bfc721eef5c13704efe6864c7da2ad4b0d75f60a
Fixed
c79cf15eb35a4c703bf18f8c33c47e80dd660f8e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b6bbbb8ef48dde09c0dbd77121fa0f09b0237fec

Affected versions

v6.*
v6.15.10
v6.15.11
v6.15.4
v6.15.5
v6.15.6
v6.15.7
v6.15.8
v6.15.9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98842.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.15.4
Fixed
6.16
Type
ECOSYSTEM
Events
Introduced
6.16.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98842.json"