Riskcovery

CVE-2026-98842

module: fix lost error code from codetag_load_module()

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

module: fix lost error code from codetag_load_module()

If codetag_load_module() fails, err is not set to reflect the failure and load_module() returns 0 after the module has been torn down.

Also, if the module is a livepatch, mod->klp_info allocated by copy_module_elf() leaks on this error path. Free it via a new livepatch_cleanup label.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 044d2aee6c575231ed4a24fb3d119bad0937488b to before 258310d59a82ea4854bfd9138682bbaac1153b19Affected
  • 044d2aee6c575231ed4a24fb3d119bad0937488b to before bfc721eef5c13704efe6864c7da2ad4b0d75f60aAffected
  • 044d2aee6c575231ed4a24fb3d119bad0937488b to before c79cf15eb35a4c703bf18f8c33c47e80dd660f8eAffected
  • b6bbbb8ef48dde09c0dbd77121fa0f09b0237fecAffected
  • 6.15.4 to before 6.16Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.