# af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().

CVE record · `CVE-2026-98095`

- **Identifiers:** `CVE-2026-98095`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 25 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:24 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 3e0cad1432a0c0564f5076bab16f1aa4c0474be4` (git)
  - affected: `69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 6d4d55f75fa0ea32d874eb33e356e9361f3e4591` (git)
  - affected: `69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 09e3c9b32434600a6992e762bf0d6837f5902134` (git)
  - affected: `69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 2b9fa12fbdbfc0f671ff23b0ea06c177a6b8a6b8` (git)
  - affected: `69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before c6b3db727876a027013aa4ccb6913a153a2af41a` (git)
  - affected: `69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 72abe77e88c3f1f71c5348124e9b28e285f26950` (git)
  - affected: `69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 9d714076ff398ba8cc5ae0ae146f4a1ea0bbf5e8` (git)
  - affected: `69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 73e594c19b4f815d8343461cec7074c4713bbde7` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `2.6.31`
  - unaffected: `before 2.6.31` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.111 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.53 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.7 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0012, the 2nd percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98095](https://www.cve.org/CVERecord?id=CVE-2026-98095)
- [NVD: CVE-2026-98095](https://nvd.nist.gov/vuln/detail/CVE-2026-98095)

### References from the CNA

- <https://git.kernel.org/stable/c/3e0cad1432a0c0564f5076bab16f1aa4c0474be4>
- <https://git.kernel.org/stable/c/6d4d55f75fa0ea32d874eb33e356e9361f3e4591>
- <https://git.kernel.org/stable/c/09e3c9b32434600a6992e762bf0d6837f5902134>
- <https://git.kernel.org/stable/c/2b9fa12fbdbfc0f671ff23b0ea06c177a6b8a6b8>
- <https://git.kernel.org/stable/c/c6b3db727876a027013aa4ccb6913a153a2af41a>
- <https://git.kernel.org/stable/c/72abe77e88c3f1f71c5348124e9b28e285f26950>
- <https://git.kernel.org/stable/c/9d714076ff398ba8cc5ae0ae146f4a1ea0bbf5e8>
- <https://git.kernel.org/stable/c/73e594c19b4f815d8343461cec7074c4713bbde7>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98095>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98095/>. Everything for agents: <https://agentprime.io/llms.txt>.