# vxlan: use one headroom snapshot for neighbour replies

CVE record · `CVE-2026-98568`

- **Identifiers:** `CVE-2026-98568`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 18 Oct 2026
- **Updated:** 30 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:18 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before e3e24f4c434c56952412f875b834aa9daaa4fb15` (git)
  - affected: `4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before 9ed5a548b42d46e6968a46b67ca8a8e49b12a5a1` (git)
  - affected: `4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before fcaf456092dc86fd5b0b523ac27ec0d114066931` (git)
  - affected: `4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before 45a67662bf8ce3aa5643accf98d328dfbb47eaf6` (git)
  - affected: `4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before 315d42ca39f69846662961c25dcf2bb07c350d14` (git)
  - affected: `4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before a3c5eb6e382dd426a5e7eb08608897ed57167ff7` (git)
  - affected: `4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before ff022fd9d0f0282c575e11778b96bd1b637503eb` (git)
  - affected: `4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before 481506a756dcd828ef42391cb08f38d8d96d38fc` (git)
  - affected: `d8be18c52dbc94989f6d74637b731af39cd3d902` (git)
  - affected: `3927dace523706cc00f808520eaf2125dd7c07b5` (git)
  - affected: `3.12.18 to before 3.13` (semver)
  - affected: `3.13.10 to before 3.14` (semver)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `3.14`
  - unaffected: `before 3.14` (semver)
  - unaffected: `5.10.273 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.224 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.191 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.112 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.55 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.9 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0021, the 11th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98568](https://www.cve.org/CVERecord?id=CVE-2026-98568)
- [NVD: CVE-2026-98568](https://nvd.nist.gov/vuln/detail/CVE-2026-98568)

### References from the CNA

- <https://git.kernel.org/stable/c/e3e24f4c434c56952412f875b834aa9daaa4fb15>
- <https://git.kernel.org/stable/c/9ed5a548b42d46e6968a46b67ca8a8e49b12a5a1>
- <https://git.kernel.org/stable/c/fcaf456092dc86fd5b0b523ac27ec0d114066931>
- <https://git.kernel.org/stable/c/45a67662bf8ce3aa5643accf98d328dfbb47eaf6>
- <https://git.kernel.org/stable/c/315d42ca39f69846662961c25dcf2bb07c350d14>
- <https://git.kernel.org/stable/c/a3c5eb6e382dd426a5e7eb08608897ed57167ff7>
- <https://git.kernel.org/stable/c/ff022fd9d0f0282c575e11778b96bd1b637503eb>
- <https://git.kernel.org/stable/c/481506a756dcd828ef42391cb08f38d8d96d38fc>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98568>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98568/>. Everything for agents: <https://agentprime.io/llms.txt>.