CVE-2026-98985

🗓️ 23 Oct 2026 13:17:00Reported by ubuntu.comType

ubuntucve🔗 ubuntu.com👁 7 Views

Use-after-free in Linux kernel pivot_root() via reading parents of unmounted mounts.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2026-98985	23 Oct 202613:30	–	circl
CNNVD	Linux kernel security vulnerabilities	23 Oct 202600:00	–	cnnvd
CVE	CVE-2026-98985	23 Oct 202612:20	–	cve
Cvelist	CVE-2026-98985 namespace: check the mounts before reading their parents in pivot_root()	23 Oct 202612:20	–	cvelist
Debian CVE	CVE-2026-98985	23 Oct 202612:20	–	debiancve
EUVD	EUVD-2026-108779	23 Oct 202612:20	–	euvd
Microsoft CVE	namespace: check the mounts before reading their parents in pivot_root()	24 Oct 202608:11	–	mscve
NVD	CVE-2026-98985	23 Oct 202613:17	–	nvd
osv_azl	AZL-110822 CVE-2026-98985 affecting package kernel 6.6.159.1-1	23 Oct 202613:17	–	osv_azl
osv_bell	BELL-CVE-2026-98985	28 Oct 202606:07	–	osv_bell

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	18.04	all	linux	0	linux_0_all.deb
Ubuntu	20.04	all	linux	0	linux_0_all.deb
Ubuntu	22.04	all	linux	0	linux_0_all.deb
Ubuntu	24.04	all	linux	0	linux_0_all.deb
Ubuntu	26.04	all	linux	0	linux_0_all.deb
Ubuntu	26.10	all	linux	0	linux_0_all.deb
Ubuntu	16.04	all	linux	0	linux_0_all.deb
Ubuntu	16.04	all	linux-hwe	0	linux-hwe_0_all.deb
Ubuntu	18.04	all	linux-hwe-5.4	0	linux-hwe-5.4_0_all.deb
Ubuntu	20.04	all	linux-hwe-5.15	0	linux-hwe-5.15_0_all.deb

Source	Link
cve	www.cve.org/CVERecord
git	www.git.kernel.org/stable/c/3c2441e21c3df867e4131e0ff784ecdb3a7a55f8
git	www.git.kernel.org/stable/c/3dad2330c89343ba083cf7868779083fd5fbe0fe
git	www.git.kernel.org/stable/c/6b7c001eb5857fa09041f47673666060a2e5fc1c
git	www.git.kernel.org/stable/c/a56d4f8f8f4c5d9ac339d5c03a9d90eecd3697fc
git	www.git.kernel.org/stable/c/e3aba6900483f64e6c9eb328150dd633b7d36c1c

28 Oct 2026 16:58Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.00177

Linux kernel pivot_root()use-after-free mount namespace path_pivot_root()