CVE record · CVE-2026-98568

vxlan: use one headroom snapshot for neighbour replies

No CVSS scoreEPSS 0.0021 · 11th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:18 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected 4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before e3e24f4c434c56952412f875b834aa9daaa4fb15 git affected 4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before 9ed5a548b42d46e6968a46b67ca8a8e49b12a5a1 git affected 4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before fcaf456092dc86fd5b0b523ac27ec0d114066931 git affected 4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before 45a67662bf8ce3aa5643accf98d328dfbb47eaf6 git affected 4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before 315d42ca39f69846662961c25dcf2bb07c350d14 git affected 4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before a3c5eb6e382dd426a5e7eb08608897ed57167ff7 git affected 4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before ff022fd9d0f0282c575e11778b96bd1b637503eb git affected 4b29dba9c085a4fb79058fb1c45a2f6257ca3dfa to before 481506a756dcd828ef42391cb08f38d8d96d38fc git affected d8be18c52dbc94989f6d74637b731af39cd3d902 git affected 3927dace523706cc00f808520eaf2125dd7c07b5 git affected 3.12.18 to before 3.13 semver affected 3.13.10 to before 3.14 semver Other versions: unaffected
Linux	Linux	affected 3.14 unaffected before 3.14 semver unaffected 5.10.273 to 5.10., inclusive semver unaffected 5.15.224 to 5.15., inclusive semver unaffected 6.1.191 to 6.1., inclusive semver unaffected 6.6.158 to 6.6., inclusive semver unaffected 6.12.112 to 6.12., inclusive semver unaffected 6.18.55 to 6.18., inclusive semver unaffected 7.2.9 to 7.2., inclusive semver unaffected 7.3 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-98568
CNA: Linux
Tags: Linux kernel
Published: 18 Oct 2026
Updated: 30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.0021, the 11th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.