CVE-2026-98161

A flaw was found in the Linux kernel's persistent memory (pmem) subsystem. When processing storage write requests, the driver continues copying data even if a preceding cache flush operation fails, potentially overwriting the error status and reporting success. A local user performing I/O operations on persistent memory devices could trigger this flaw, leading to silent data corruption or inconsistent storage states due to violated write ordering barriers.

A flaw of moderate impact was found in the Linux kernel's persistent memory (pmem) driver in drivers/nvdimm/pmem.c, affecting the kernel and kernel-rt packages in Red Hat Enterprise Linux 8, 9, and 10, as well as RHIVOS 2 and the RHEL CoreOS images shipped with OpenShift 4.12 and later. In pmem_submit_bio(), an error from a REQ_PREFLUSH cache-flush operation was recorded, but the driver continued copying the bio data, and a later successful REQ_FUA flush could overwrite the earlier error. As a result, data writes could proceed after a failed preflush and the I/O request could be completed successfully despite the failed write-ordering barrier, which can lead to silent data corruption or inconsistent storage states on persistent memory devices. A local user with write access to a pmem block device or a filesystem backed by it could trigger this behavior during ordinary I/O; the issue is not network reachable and does not involve privilege escalation or information disclosure. Red Hat Enterprise Linux 6 and 7 are marked not affected because the vulnerable code is not present in those kernels. The Red Hat and NIST CVSS v3.1 scores are both 5.5 (MODERATE), so there is no difference from the upstream severity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.