Critical Logical Key Offset Vulnerability in Linux Kernel's dm-pcache
Summary
CVE-2026-98867: dm-pcache: bound the logical key offset from persistent memory. Affects across 5 version ranges.
>= 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0, < 3d5a87cb909c1f375f08065b20123fa5db5958d8
>= 6.18.0, < 6.18.52
>= 6.19.0, < 7.2.10
< 97fc4b53dbe4a983fdf093243067fa6a64562307
< 10449703200076980704894c3d68d6796182371b
Fixed in 6.18.52 or 7.2.10, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a core component of many operating systems, providing essential services and managing hardware resources. The dm-pcache module is responsible for caching data to improve performance. However, it has been found to have a vulnerability that could lead to serious security issues if exploited.
Vulnerability Detail
The vulnerability, identified as CVE-2026-98867, arises from the dm-pcache module's handling of logical key offsets from persistent memory. Specifically, the cache_key_decode() function does not properly validate the key's logical offset before using it to index into an array. This oversight can lead to out-of-bounds memory access, allowing an attacker to manipulate memory and potentially execute arbitrary code. The vulnerability affects versions of the Linux Kernel prior to the fixed versions, making it critical for users to address it promptly.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 6.18.0, < 6.18.526.18.52 -
>= 6.19.0, < 7.2.107.2.10
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, users can avoid using the dm-pcache module until the kernel is updated. This can be done by disabling the module in the kernel configuration or by not using features that rely on it.
Conclusion
The CVE-2026-98867 vulnerability in the Linux Kernel's dm-pcache module poses a serious risk due to improper handling of logical key offsets. Users are strongly encouraged to update their kernels to the latest patched versions to mitigate this risk. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for →
FAQ
CVE-2026-98867 is a vulnerability in the Linux Kernel's dm-pcache module that allows for out-of-bounds memory access due to improper handling of logical key offsets.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to memory corruption, arbitrary code execution, or system crashes, posing significant security risks.
You can update your Linux Kernel using your package manager. For example, on Debian-based systems, you can run 'sudo apt-get update' followed by 'sudo apt-get upgrade linux-image-$(uname -r)'.
Yes, the permanent fix is to update to the patched versions of the Linux Kernel that address this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for .
