Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98384

bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()

No CVSS scoreEPSS 0.0016 · 4th percentile

Published by the CVE Program (CNA: Linux) at 9 Oct 2026, 07:34 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 4ddbcb886268af8d12a23e6640b39d1d9c652b1b to before 5b4eb82475ae17d55974235c09e97044829426a8 git
  • affected 4ddbcb886268af8d12a23e6640b39d1d9c652b1b to before a9651704c6fd64590b5ad4fbe7c3768accf95993 git
  • affected 4ddbcb886268af8d12a23e6640b39d1d9c652b1b to before 91a482a81eabddebf5430cbbdf12027e1a91b767 git
  • affected 4ddbcb886268af8d12a23e6640b39d1d9c652b1b to before 2534a5e5d360c2b10203cfa80f4ab9d021e48f2f git
  • affected 4ddbcb886268af8d12a23e6640b39d1d9c652b1b to before 01b245ba016d44861690594e10f67e026ce8552f git
Other versions: unaffected
Linux Linux
  • affected 6.5
  • unaffected before 6.5 semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.55 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98384
CNA
Linux
Tags
Published
9 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0016, the 4th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 9 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.