CVE-2026-98106 Linux CVE debrief

Who should care

Linux kernel administrators and developers should assess exposure and prioritize verification of affected systems, especially those using device-private folios, to prevent potential soft lockup and RCU stall issues. They should verify Linux kernel versions and configurations for exposure, assess system vulnerability to device-private folio migration issues, and apply patches or updates to address the vulnerability. Additionally, they should review compens

Why it matters

Linux kernel administrators and developers should assess exposure and prioritize verification of affected systems, especially those using device-private folios, to prevent potential soft lockup and RCU stall.

• Potential soft lockup and RCU stall
• Verification of affected systems required
• Patch application necessary to prevent double migration

Technical summary

The Linux kernel vulnerability CVE-2026-98106 allows a device-private folio to be migrated multiple times, potentially causing a soft lockup and RCU stall. A patch has been applied to mark successfully migrated device-private folios and prevent double migration. This patch ensures that successfully migrated device-private folios are marked to prevent double migration, which can cause soft lockup and RCU stall issues in the Linux kernel. The patch modifies the migration process to avoid attempting to migrate the same folio multiple times.

Defensive priority

Linux kernel administrators and developers should assess exposure and prioritize verification of affected systems, especially those using device-private folios.

Recommended defensive actions

• Verify Linux kernel versions and configurations for exposure
• Assess system vulnerability to device-private folio migration issues
• Apply patches or updates to address the vulnerability
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The issue was observed as a soft lockup and RCU stall with a specific call trace. A patch has been applied to mark successfully migrated device-private folios and prevent double migration. Linux kernel administrators and developers should verify affected systems, especially those using device-private folios, and assess exposure to potential soft lockup and RCU stall.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.