netfs: clear PG_private_2 on copy-to-cache append failure (CVE-2026-80898) | HOL Guard CVE

Unknown severity · Source severity not reportedCVE-2026-80898

netfs: clear PG_private_2 on copy-to-cache append failure

Answer in brief

CVE-2026-80898 records a Unknown severity vulnerability in netfs: clear PG_private_2 on copy-to-cache append failure. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Sep 4, 2026Updated Sep 4, 2026Source checked Sep 4, 2026First seen by HOL Sep 4, 2026Material review Sep 4, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=e2d46f2ec332533816417b60933954173f602121 <627826ef4208042b0470d1a3fdb729ce35471a0d \|\| >=e2d46f2ec332533816417b60933954173f602121 <614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e \|\| >=e2d46f2ec332533816417b60933954173f602121 <a81fc9266e1c5fef9ccf675a9b44b2f4ab464923	627826ef4208042b0470d1a3fdb729ce35471a0d, 614b7f4bfcf665a751ae89ff9ae336a1b2d5af4e, a81fc9266e1c5fef9ccf675a9b44b2f4ab464923
Linux/Linuxgeneric	6.14	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to 627826ef4208042b0470d1a3fdb729ce35471a0d if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Sep 4, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 4, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 4, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: netfs: clear PG_private_2 on copy-to-cache append failure netfs_pgpriv2_copy_to_cache() marks the folio with PG_private_2 before netfs_pgpriv2_copy_folio() appends it to the copy-to-cache rolling buffer. If the append fails, the folio is not queued for cache writeback, so the PG_private_2 state and its reference must be released immediately.

Quoted source text, attributed separately from HOL analysis.