Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98095

af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().

No CVSS scoreEPSS 0.0012 · 2nd percentile

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:24 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 3e0cad1432a0c0564f5076bab16f1aa4c0474be4 git
  • affected 69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 6d4d55f75fa0ea32d874eb33e356e9361f3e4591 git
  • affected 69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 09e3c9b32434600a6992e762bf0d6837f5902134 git
  • affected 69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 2b9fa12fbdbfc0f671ff23b0ea06c177a6b8a6b8 git
  • affected 69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before c6b3db727876a027013aa4ccb6913a153a2af41a git
  • affected 69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 72abe77e88c3f1f71c5348124e9b28e285f26950 git
  • affected 69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 9d714076ff398ba8cc5ae0ae146f4a1ea0bbf5e8 git
  • affected 69e3c75f4d541a6eb151b3ef91f34033cb3ad6e1 to before 73e594c19b4f815d8343461cec7074c4713bbde7 git
Other versions: unaffected
Linux Linux
  • affected 2.6.31
  • unaffected before 2.6.31 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.111 to 6.12.*, inclusive semver
  • unaffected 6.18.53 to 6.18.*, inclusive semver
  • unaffected 7.2.7 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98095
CNA
Linux
Tags
Published
25 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0012, the 2nd percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.