Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98252

RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()

CVSS 7.0 HighEPSS 0.0012 · 1st percentile

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:45 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 52c13c63bb3662c108244e7447055e30bf40244e git
  • affected 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 8a91609032d47e77bcb37bc8f6e88d89340d2709 git
  • affected 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before ce8a379598bd4058081416abea4279fd05a95374 git
  • affected 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8 git
  • affected 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 88e429a4e9bac3d2138011c5ca06254331f2587f git
  • affected 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before e15eb536be4f646ce683d2867572b2200be877f7 git
  • affected 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 117871cdb8927542abd7b65ce5995bf0265a8c05 git
  • affected 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 33fb59da49c4c3f5c2ec9f9d4447a56857a02c02 git
Other versions: unaffected
Linux Linux
  • affected 3.16
  • unaffected before 3.16 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.54 to 6.18.*, inclusive semver
  • unaffected 7.2.8 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98252
CNA
Linux
Tags
Published
6 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.0 High 3.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0012, the 1st percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.