Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98381

veth: manage XDP program pointers during channel resize

CVSS 7.8 HighEPSS 0.0013 · 2nd percentile

Published by the CVE Program (CNA: Linux) at 9 Oct 2026, 07:34 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 7a8e143109ff2736dc79e41dcd55af7ceab7520a git
  • affected 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 1a5c5b9c64ba5f39dba55da6e12561ca56eeb758 git
  • affected 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before f0e8dba8c224981e53c792c6b3dbb7604fb2c2c6 git
  • affected 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 3c10a5dd0d38f506f671dbb59e9d0ee4c72076f9 git
  • affected 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 25bb7c36225220d30f404d7e29d2e052bc5f4b99 git
  • affected 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 43f6b647f209591b1e3f726bb16b8dcba6b95908 git
  • affected 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 to before 7104a370714346b667712913dc16abf14bbc97ed git
Other versions: unaffected
Linux Linux
  • affected 5.15
  • unaffected before 5.15 semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.55 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98381
CNA
Linux
Tags
Published
9 Oct 2026
Updated
24 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0013, the 2nd percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 9 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.