# bpf: Fix NULL-ptr-deref in btf_var_show()

CVE record · `CVE-2026-98063`

- **Identifiers:** `CVE-2026-98063`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 25 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:24 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `c4d0bfb45068d853a478b9067a95969b1886a30f to before 5756450c9a702da0efb4a993d0a6766b965736f3` (git)
  - affected: `c4d0bfb45068d853a478b9067a95969b1886a30f to before e83fcbe3b5d4a1ffb0569bb7c280358065c6017a` (git)
  - affected: `c4d0bfb45068d853a478b9067a95969b1886a30f to before e0d6a06171633d3ee3f7a39b57e5c845fb2b79f2` (git)
  - affected: `c4d0bfb45068d853a478b9067a95969b1886a30f to before aec0a9c1579eb9edf534960be592d09481bd7ac3` (git)
  - affected: `c4d0bfb45068d853a478b9067a95969b1886a30f to before e472ae0d97865e2021ee668a13eab64013aebf23` (git)
  - affected: `c4d0bfb45068d853a478b9067a95969b1886a30f to before ca086264e98108b44fdf53971033811a48defe2b` (git)
  - affected: `c4d0bfb45068d853a478b9067a95969b1886a30f to before ea383b3ea56979ce54c8aa88e6ec67164986c401` (git)
  - affected: `c4d0bfb45068d853a478b9067a95969b1886a30f to before 5403a383f52fc0905703b488f7c3db4b2447dc58` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.10`
  - unaffected: `before 5.10` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.111 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.53 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.7 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98063](https://www.cve.org/CVERecord?id=CVE-2026-98063)
- [NVD: CVE-2026-98063](https://nvd.nist.gov/vuln/detail/CVE-2026-98063)

### References from the CNA

- <https://git.kernel.org/stable/c/5756450c9a702da0efb4a993d0a6766b965736f3>
- <https://git.kernel.org/stable/c/e83fcbe3b5d4a1ffb0569bb7c280358065c6017a>
- <https://git.kernel.org/stable/c/e0d6a06171633d3ee3f7a39b57e5c845fb2b79f2>
- <https://git.kernel.org/stable/c/aec0a9c1579eb9edf534960be592d09481bd7ac3>
- <https://git.kernel.org/stable/c/e472ae0d97865e2021ee668a13eab64013aebf23>
- <https://git.kernel.org/stable/c/ca086264e98108b44fdf53971033811a48defe2b>
- <https://git.kernel.org/stable/c/ea383b3ea56979ce54c8aa88e6ec67164986c401>
- <https://git.kernel.org/stable/c/5403a383f52fc0905703b488f7c3db4b2447dc58>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98063>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98063/>. Everything for agents: <https://agentprime.io/llms.txt>.