CVE record · CVE-2026-98996

fs: don't silently unmount busy mounts

No CVSS scoreEPSS 0.0017 · 5th percentile

Published by the CVE Program (CNA: Linux) at 23 Oct 2026, 12:20 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected 99b19d16471e9c3faa85cad38abc9cbbe04c6d55 to before bf2c8dec26fb792876b5e9bde7030c45d8be3908 git affected 99b19d16471e9c3faa85cad38abc9cbbe04c6d55 to before a210ac218c307513d43e98a08f23c2dfbeeebc2f git affected 99b19d16471e9c3faa85cad38abc9cbbe04c6d55 to before 6857e209015f95be7a8f19a9cd5dac345b9b9859 git affected dc5ce95b0252d143497283f7f659840d4f8a79d0 git affected fdb8f10499924d96b8eb60cc1354b278f6fcf0e9 git affected bb4fbf094b440a9209ed88c8681960d4b26eec0f git affected b43f81ef0babcc07db1eaaece37c989204e4ff00 git affected 81311d1698c0c87c972ba71d3ce44a617b52ea21 git affected 4.1.43 to before 4.2 semver affected 4.4.78 to before 4.5 semver affected 4.9.39 to before 4.10 semver affected 4.11.12 to before 4.12 semver and 1 more Other versions: unaffected
Linux	Linux	affected 4.13 unaffected before 4.13 semver unaffected 6.18.57 to 6.18., inclusive semver unaffected 7.2.11 to 7.2., inclusive semver unaffected 7.3 to *, inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-98996
CNA: Linux
Tags: Linux kernel
Published: 23 Oct 2026
Updated: 23 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.0017, the 5th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 23 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.