CVE-2026-98157

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the EDAC/device sysfs component where the poll msec sysfs store file utilizes the simple strtoul() function. Because simple strtoul() accepts an unsigned long while the target field poll msec is an unsigned int, values exceeding UINT MAX are silently truncated on 64-bit systems. Additionally, a lack of validation for values less than 1 could allow a 0-delay case, causing the poll work to spin without delay and consume 100% of the CPU.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.