Linux Kernel: Lost Error Code in codetag_load_module() Leading to Silent Failure
CVE-2026-98842 Published on October 18, 2026
module: fix lost error code from codetag_load_module()
In the Linux kernel, the following vulnerability has been resolved:
module: fix lost error code from codetag_load_module()
If codetag_load_module() fails, err is not set to reflect the failure
and load_module() returns 0 after the module has been torn down.
Also, if the module is a livepatch, mod->klp_info allocated by
copy_module_elf() leaks on this error path. Free it via a new
livepatch_cleanup label.
Products Associated with CVE-2026-98842
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 044d2aee6c575231ed4a24fb3d119bad0937488b and below 258310d59a82ea4854bfd9138682bbaac1153b19 is affected.
- Version 044d2aee6c575231ed4a24fb3d119bad0937488b and below bfc721eef5c13704efe6864c7da2ad4b0d75f60a is affected.
- Version 044d2aee6c575231ed4a24fb3d119bad0937488b and below c79cf15eb35a4c703bf18f8c33c47e80dd660f8e is affected.
- Version b6bbbb8ef48dde09c0dbd77121fa0f09b0237fec is affected.
- Version 6.15.4 and below 6.16 is affected.
- Version 6.16 is affected.
- Before 6.16 is unaffected.
- Version 6.18.56, <= 6.18.* is unaffected.
- Version 7.2.10, <= 7.2.* is unaffected.
- Version 7.3-rc6, <= * is unaffected.