CVE-2026-98684

A flaw was found in the Linux kernel's Server Message Block (SMB) client. When performing file space allocation operations against certain remote servers, such as Windows servers, the client queries allocated file ranges before flushing recently written data. Because the remote server may report uncommitted ranges as empty space, the client can incorrectly overwrite live data with zeroes. A local user performing file allocation operations on an SMB share can trigger this flaw, resulting in silent data corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.