CVE record · CVE-2026-98201

Input: zero ff_effect before compat copy in input_ff_effect_from_user

No CVSS scoreEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:44 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before ed0905fda39682d3da7937184397d3276abbffa8 git
  • affected 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before ec174c2ab1abb76b20fa167c6db848c3d97aa838 git
  • affected 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before 6c26681c5668c973bd0e951407d670ac60d9cd66 git
  • affected 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before c5e573bb095d502be7cbbaa99c26a20984111c6d git
  • affected 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before b878720e8bcaa4cf7163a5081f904dd6baf11b2c git
  • affected 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before 0d05b43b55d4784a42ce8fb318175f8ad7d9af5a git
  • affected 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before ed0406e490f48ed180df140fe2a81be26bccb1a9 git
  • affected 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before f84819ef8d66931ee3998fee3c4f03230f4cb6cc git
Other versions: unaffected
Linux Linux
  • affected 2.6.29
  • unaffected before 2.6.29 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.54 to 6.18.*, inclusive semver
  • unaffected 7.2.8 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98201
CNA
Linux
Published
6 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.