CVE record · CVE-2026-98234

net/sched: hhf: cap hh_flows_limit at change time

No CVSS scoreEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:45 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 10239edf86f137ce4c39b62ea9575e8053c549a0 to before 7adfd0a42174b85c6bd678858ecd6674f403f336 git
  • affected 10239edf86f137ce4c39b62ea9575e8053c549a0 to before 35fd423a5c5132c6f4321f6c4f0a7b4b90af830c git
  • affected 10239edf86f137ce4c39b62ea9575e8053c549a0 to before 06d2a101e89063cb0b9b459104db48bdfb0a797d git
  • affected 10239edf86f137ce4c39b62ea9575e8053c549a0 to before d8e2f1f0263b7c97b222c06070cccf13e0ab7112 git
  • affected 10239edf86f137ce4c39b62ea9575e8053c549a0 to before f3f4a5cb4a6e9b1f1f25d34dfc25f836a1601db4 git
  • affected 10239edf86f137ce4c39b62ea9575e8053c549a0 to before 1731ff1d20489afe4cd01b7d16d37f324746ac54 git
  • affected 10239edf86f137ce4c39b62ea9575e8053c549a0 to before f6547d27ce2093c5627636fb63dd0b7523c466f9 git
  • affected 10239edf86f137ce4c39b62ea9575e8053c549a0 to before 2cef2588c995722a901368def30befeef9ae55c6 git
Other versions: unaffected
Linux Linux
  • affected 3.14
  • unaffected before 3.14 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.54 to 6.18.*, inclusive semver
  • unaffected 7.2.8 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98234
CNA
Linux
Published
6 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.