CVE-2026-98842 PUBLISHED

module: fix lost error code from codetag_load_module()

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

module: fix lost error code from codetag_load_module()

If codetag_load_module() fails, err is not set to reflect the failure and load_module() returns 0 after the module has been torn down.

Also, if the module is a livepatch, mod->klp_info allocated by copy_module_elf() leaks on this error path. Free it via a new livepatch_cleanup label.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 044d2aee6c575231ed4a24fb3d119bad0937488b to 258310d59a82ea4854bfd9138682bbaac1153b19 (excl.)
  • affected from 044d2aee6c575231ed4a24fb3d119bad0937488b to bfc721eef5c13704efe6864c7da2ad4b0d75f60a (excl.)
  • affected from 044d2aee6c575231ed4a24fb3d119bad0937488b to c79cf15eb35a4c703bf18f8c33c47e80dd660f8e (excl.)
  • Version b6bbbb8ef48dde09c0dbd77121fa0f09b0237fec is affected
  • affected from 6.15.4 to 6.16 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.16 is affected
  • unaffected from 0 to 6.16 (excl.)
  • unaffected from 6.18.56 to 6.18.* (incl.)
  • unaffected from 7.2.10 to 7.2.* (incl.)
  • unaffected from 7.3-rc6 to * (incl.)

References