{"id":"CVE-2026-98867","published":"2026-10-18T16:17:41.220","lastModified":"2026-10-19T10:19:50.747","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: bound the logical key offset from persistent memory\n\ncache_key_decode() takes a key's logical off from the cache device and\nlater indexes req_key_tree->subtrees[] by it in get_subtree(). An off\npast the device forms a subtree pointer outside the array, which\nrb_insert() writes through during replay.\n\nReject a key of zero length, or whose off+len (computed in 64 bits)\nexceeds the device size, before it is used.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/10449703200076980704894c3d68d6796182371b","tags":[]},{"url":"https://git.kernel.org/stable/c/3d5a87cb909c1f375f08065b20123fa5db5958d8","tags":[]},{"url":"https://git.kernel.org/stable/c/97fc4b53dbe4a983fdf093243067fa6a64562307","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}