# veth: manage XDP program pointers during channel resize

CVE record · `CVE-2026-98381`

- **Identifiers:** `CVE-2026-98381`
- **State:** Confirmed
- **Severity:** CVSS 7.8 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 9 Oct 2026
- **Updated:** 24 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 9 Oct 2026, 07:34 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 7a8e143109ff2736dc79e41dcd55af7ceab7520a` (git)
  - affected: `4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 1a5c5b9c64ba5f39dba55da6e12561ca56eeb758` (git)
  - affected: `4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before f0e8dba8c224981e53c792c6b3dbb7604fb2c2c6` (git)
  - affected: `4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 3c10a5dd0d38f506f671dbb59e9d0ee4c72076f9` (git)
  - affected: `4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 25bb7c36225220d30f404d7e29d2e052bc5f4b99` (git)
  - affected: `4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 43f6b647f209591b1e3f726bb16b8dcba6b95908` (git)
  - affected: `4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 7104a370714346b667712913dc16abf14bbc97ed` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.15`
  - unaffected: `before 5.15` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.112 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.55 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.9 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.8 High, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0013, the 2nd percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 9 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98381](https://www.cve.org/CVERecord?id=CVE-2026-98381)
- [NVD: CVE-2026-98381](https://nvd.nist.gov/vuln/detail/CVE-2026-98381)

### References from the CNA

- <https://git.kernel.org/stable/c/7a8e143109ff2736dc79e41dcd55af7ceab7520a>
- <https://git.kernel.org/stable/c/1a5c5b9c64ba5f39dba55da6e12561ca56eeb758>
- <https://git.kernel.org/stable/c/f0e8dba8c224981e53c792c6b3dbb7604fb2c2c6>
- <https://git.kernel.org/stable/c/3c10a5dd0d38f506f671dbb59e9d0ee4c72076f9>
- <https://git.kernel.org/stable/c/25bb7c36225220d30f404d7e29d2e052bc5f4b99>
- <https://git.kernel.org/stable/c/43f6b647f209591b1e3f726bb16b8dcba6b95908>
- <https://git.kernel.org/stable/c/7104a370714346b667712913dc16abf14bbc97ed>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98381>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98381/>. Everything for agents: <https://agentprime.io/llms.txt>.