CVE-2026-98685

A flaw was found in the Linux kernel's SMB client. This vulnerability can lead to information disclosure when extending a file via a clone range operation. Because the client fails to discard cached memory pages that straddle the original end-of-file boundary, data previously written past the boundary through memory mapping remains visible as valid file content. A local user could exploit this issue to expose sensitive or unintended data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.