CVE-2026-98727

Published: Ott 18, 2026 Last Modified: Ott 19, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

In the Linux kernel, the following vulnerability has been resolved:

nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known

The namespace head is marked zoned at allocation time based only on the
command set identifier. If the zone info query reports a zero zone size,
the path namespace is registered without zoned limits while the head
still advertises the zoned capability with a zone size of zero, and
reporting zones or writing to the head then shifts by ilog2(0).

Drop the zoned feature from the head allocation and let the head limits
refresh stack it in from the path namespace instead.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0020
Percentile
0,1th
Updated

EPSS Score Trend (Last 2 Days)

https://git.kernel.org/stable/c/2d86abd28071481a1abd87204a47325975dc821c
https://git.kernel.org/stable/c/44dc998c38fb5e153c3ed5665f1112661841c3f5
https://git.kernel.org/stable/c/4a5e49ba0abb8b4328d6318c9aef0c0121f95507
https://git.kernel.org/stable/c/8b85838c1fdba5ba90152693ca158aa9660c628f