Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98241

ipv6: xfrm: use full sockets in local error paths

CVSS 7.8 HighEPSS 0.0013 · 2nd percentile

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:45 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected dd767856a36e00b631d65ebc4bb81b19915532d6 to before b1a88633c36d2cbc3831382f3846754d344276fd git
  • affected dd767856a36e00b631d65ebc4bb81b19915532d6 to before 904a0e827d0d7189271a3a2eb648293809f25efc git
  • affected dd767856a36e00b631d65ebc4bb81b19915532d6 to before 675919e08ce266b8cac11fd9af29170e762a480f git
  • affected dd767856a36e00b631d65ebc4bb81b19915532d6 to before 60459c670329d586a58db5d8f811fa5accfe4862 git
  • affected dd767856a36e00b631d65ebc4bb81b19915532d6 to before ca3d68c3213475b53db6647e159dc73bd1af5ab1 git
  • affected dd767856a36e00b631d65ebc4bb81b19915532d6 to before 4c030a0400ebfd2318361c923a88103b2c67c49f git
  • affected dd767856a36e00b631d65ebc4bb81b19915532d6 to before c21f3f7fbfeda7c5794f606cb0ffcc2d9001eef8 git
  • affected dd767856a36e00b631d65ebc4bb81b19915532d6 to before 6973a21ee73c5567f883813c8ef414774b45892f git
Other versions: unaffected
Linux Linux
  • affected 3.2
  • unaffected before 3.2 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.54 to 6.18.*, inclusive semver
  • unaffected 7.2.8 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98241
CNA
Linux
Tags
Published
6 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0013, the 2nd percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.