{"id":"CVE-2026-98902","kind":"vulnerability","aliases":["CVE-2026-98902"],"related":[],"title":"Linux kernel md/raid5: stripe batch sequence comparison breaks after wraparound","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5: let stripe batch bm_seq comparison wrap-safe\n\nOnce the 32-bit seq wraps, a newer bm_seq can look smaller\nthan old, so .. covert to wrap-safe calculate way.","summary":"In the Linux kernel's RAID5 driver (md/raid5), comparing a 32-bit bitmap sequence number fails once it wraps around, because a newer value can look smaller than an older one. The sources do not describe a confirmed attacker outcome.","severity":"unknown","cvss":null,"epss":0.00215,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","linux","md-raid","raid5"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-23T12:18:24+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T04:59:51+00:00","updated_at":"2026-10-25T12:38:50+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T04:59:51Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Linux kernel md/raid5: stripe batch sequence comparison breaks after wraparound","impact":"low","summary":"In the Linux kernel's RAID5 driver (md/raid5), comparing a 32-bit bitmap sequence number fails once it wraps around, because a newer value can look smaller than an older one. The sources do not describe a confirmed attacker outcome.","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel","md-raid","raid5"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; the sources describe a logic error without a stated impact","analyst_note":"Find the upstream kernel commit and fixed stable versions for md/raid5 on the NVD page, and check whether the bug causes data corruption or only a stall.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00052,"input_tokens":3313,"output_tokens":377,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98902':13A,16A '32':34B,86C 'around':43B 'attack':62B 'batch':5A,77C 'bit':35B,87C 'bitmap':36B 'bm':78C,92C 'break':8A 'calcul':105C 'compar':32B 'comparison':7A,80C 'confirm':61B 'covert':100C 'cve':11A,14A 'describ':59B 'driver':30B 'fail':39B 'follow':69C 'infrastructur':17B 'kernel':2A,18B,27B,67C 'let':75C 'linux':1A,19B,26B,66C 'look':49B,95C 'md':21B 'md-raid':20B 'md/raid5':3A,31B,74C 'newer':46B,91C 'number':38B 'old':98C 'older':53B 'one':54B 'outcom':63B 'raid':22B 'raid5':23B,29B 'resolv':73C 'safe':83C,104C 'seq':79C,88C,93C 'sequenc':6A,37B 'smaller':50B,96C 'sourc':56B 'stripe':4A,76C 'valu':47B 'vulner':70C 'way':106C 'wrap':42B,82C,89C,103C 'wrap-saf':81C,102C 'wraparound':10A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T12:18:24+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98902","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98902","severity":null,"published_at":"2026-10-23T12:18:24+00:00","modified_at":"2026-10-23T12:18:24+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-98902","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98902","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:50+00:00","fetched_at":"2026-10-25T12:38:50+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}