AZL-110662: CVE-2026-98902 affecting package kernel 6.6.157.1-1

Q: Which systems are potentially affected?

Systems using the Azure Linux kernel package version 6.6.157.1-1 are identified as affected. The issue is in the kernel's md/raid5 code path.

Q: What condition triggers the problem?

The issue occurs when the 32-bit bm_seq sequence value wraps. After wrapping, a newer bm_seq value may be treated as smaller than an older value unless the comparison is wrap-safe.

Published Oct 23, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

md/raid5: let stripe batch bmseq comparison wrap-safe

Once the 32-bit seq wraps, a newer bmseq can look smaller than old, so .. covert to wrap-safe calculate way.

Affected Software

1 affected component

azure-linux/kernel<=6.6.157.1-1

Event History

Oct 23, 2026

Advisory Published

via OSV·12:18 PM

Data Sourced

via OSV·12:18 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-98902

Frequently Asked Questions

Which systems are potentially affected?

Systems using the Azure Linux kernel package version 6.6.157.1-1 are identified as affected. The issue is in the kernel's md/raid5 code path.

What condition triggers the problem?

The issue occurs when the 32-bit bm_seq sequence value wraps. After wrapping, a newer bm_seq value may be treated as smaller than an older value unless the comparison is wrap-safe.

AZL-110662: CVE-2026-98902 affecting package kernel 6.6.157.1-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems are potentially affected?

What condition triggers the problem?

Company

Resources

Contact

Frequently Asked Questions

Which systems are potentially affected?

What condition triggers the problem?