CVE-2026-98842 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetag_load_module() If codetag_load_module() fails, err is not set to reflect the failure and load_module() returns 0 after the module has been torn down. Also, if the module is a livepatch, mod->klp_info allocated by copy_module_elf() leaks on this error path. Free it via a new livepatch_cleanup label.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/258310d59a82ea4854bfd9138682bbaac1153b19
https://git.kernel.org/stable/c/bfc721eef5c13704efe6864c7da2ad4b0d75f60a
https://git.kernel.org/stable/c/c79cf15eb35a4c703bf18f8c33c47e80dd660f8e

History

Sun, 18 Oct 2026 22:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-401 CWE-754

Sun, 18 Oct 2026 16:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetag_load_module() If codetag_load_module() fails, err is not set to reflect the failure and load_module() returns 0 after the module has been torn down. Also, if the module is a livepatch, mod->klp_info allocated by copy_module_elf() leaks on this error path. Free it via a new livepatch_cleanup label.
Title		module: fix lost error code from codetag_load_module()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/258310d59a82ea4854bfd9138682bbaac1153b19 https://git.kernel.org/stable/c/bfc721eef5c13704efe6864c7da2ad4b0d75f60a https://git.kernel.org/stable/c/c79cf15eb35a4c703bf18f8c33c47e80dd660f8e

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-10-18T15:50:19.217Z

Updated: 2026-10-19T09:26:34.441Z

Reserved: 2026-09-25T10:25:14.373Z

Link: CVE-2026-98842

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-18T16:17:38.527

Modified: 2026-10-19T10:19:48.303

Link: CVE-2026-98842

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98842", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.373Z", "datePublished": "2026-10-18T15:50:19.217Z", "dateUpdated": "2026-10-19T09:26:34.441Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:26:34.441Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmodule: fix lost error code from codetag_load_module()\n\nIf codetag_load_module() fails, err is not set to reflect the failure\nand load_module() returns 0 after the module has been torn down.\n\nAlso, if the module is a livepatch, mod->klp_info allocated by\ncopy_module_elf() leaks on this error path. Free it via a new\nlivepatch_cleanup label."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/module/main.c"], "versions": [{"version": "044d2aee6c575231ed4a24fb3d119bad0937488b", "lessThan": "258310d59a82ea4854bfd9138682bbaac1153b19", "status": "affected", "versionType": "git"}, {"version": "044d2aee6c575231ed4a24fb3d119bad0937488b", "lessThan": "bfc721eef5c13704efe6864c7da2ad4b0d75f60a", "status": "affected", "versionType": "git"}, {"version": "044d2aee6c575231ed4a24fb3d119bad0937488b", "lessThan": "c79cf15eb35a4c703bf18f8c33c47e80dd660f8e", "status": "affected", "versionType": "git"}, {"version": "b6bbbb8ef48dde09c0dbd77121fa0f09b0237fec", "status": "affected", "versionType": "git"}, {"version": "6.15.4", "lessThan": "6.16", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/module/main.c"], "versions": [{"version": "6.16", "status": "affected"}, {"version": "0", "lessThan": "6.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15.4"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/258310d59a82ea4854bfd9138682bbaac1153b19"}, {"url": "https://git.kernel.org/stable/c/bfc721eef5c13704efe6864c7da2ad4b0d75f60a"}, {"url": "https://git.kernel.org/stable/c/c79cf15eb35a4c703bf18f8c33c47e80dd660f8e"}], "title": "module: fix lost error code from codetag_load_module()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["kernel/module/main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "258310d59a82ea4854bfd9138682bbaac1153b19", "status": "affected", "version": "044d2aee6c575231ed4a24fb3d119bad0937488b", "versionType": "git"}, {"lessThan": "bfc721eef5c13704efe6864c7da2ad4b0d75f60a", "status": "affected", "version": "044d2aee6c575231ed4a24fb3d119bad0937488b", "versionType": "git"}, {"lessThan": "c79cf15eb35a4c703bf18f8c33c47e80dd660f8e", "status": "affected", "version": "044d2aee6c575231ed4a24fb3d119bad0937488b", "versionType": "git"}, {"status": "affected", "version": "b6bbbb8ef48dde09c0dbd77121fa0f09b0237fec", "versionType": "git"}, {"lessThan": "6.16", "status": "affected", "version": "6.15.4", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["kernel/module/main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.16"}, {"lessThan": "6.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmodule: fix lost error code from codetag_load_module()\n\nIf codetag_load_module() fails, err is not set to reflect the failure\nand load_module() returns 0 after the module has been torn down.\n\nAlso, if the module is a livepatch, mod->klp_info allocated by\ncopy_module_elf() leaks on this error path. Free it via a new\nlivepatch_cleanup label."}], "id": "CVE-2026-98842", "lastModified": "2026-10-19T10:19:48.303", "metrics": {}, "published": "2026-10-18T16:17:38.527", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/258310d59a82ea4854bfd9138682bbaac1153b19"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bfc721eef5c13704efe6864c7da2ad4b0d75f60a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c79cf15eb35a4c703bf18f8c33c47e80dd660f8e"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}