# bpf: Fix bpf_sock context code generation

CVE record · `CVE-2026-98590`

- **Identifiers:** `CVE-2026-98590`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 18 Oct 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:19 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before e3ddcf4aeb342d4de2e5761c7042270d454752de` (git)
  - affected: `c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before 4a41d064facc3330e176ecbbf5b0026ed18a5c69` (git)
  - affected: `c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before 70288599d1754e157df8326239316dbdf08ea33c` (git)
  - affected: `c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before ea4dc96c902ccfa49dd3e4f23c443dab4a74b018` (git)
  - affected: `c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before b3f37afc7fd7c52bc2114310aff1eb24c7cd4d73` (git)
  - affected: `c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before d95dd5a6c6cd08d5ae466d3aed27b3cf59155a6c` (git)
  - affected: `c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before 84ebb991ae985149079ae9ab51b7e3ba25a9ff53` (git)
  - affected: `c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before 4a4852376e3a2727ea40e61143d6d7c22bb6dfad` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.8`
  - unaffected: `before 5.8` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.112 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.55 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.9 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0022, the 12th percentile, on 9 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98590](https://www.cve.org/CVERecord?id=CVE-2026-98590)
- [NVD: CVE-2026-98590](https://nvd.nist.gov/vuln/detail/CVE-2026-98590)

### References from the CNA

- <https://git.kernel.org/stable/c/e3ddcf4aeb342d4de2e5761c7042270d454752de>
- <https://git.kernel.org/stable/c/4a41d064facc3330e176ecbbf5b0026ed18a5c69>
- <https://git.kernel.org/stable/c/70288599d1754e157df8326239316dbdf08ea33c>
- <https://git.kernel.org/stable/c/ea4dc96c902ccfa49dd3e4f23c443dab4a74b018>
- <https://git.kernel.org/stable/c/b3f37afc7fd7c52bc2114310aff1eb24c7cd4d73>
- <https://git.kernel.org/stable/c/d95dd5a6c6cd08d5ae466d3aed27b3cf59155a6c>
- <https://git.kernel.org/stable/c/84ebb991ae985149079ae9ab51b7e3ba25a9ff53>
- <https://git.kernel.org/stable/c/4a4852376e3a2727ea40e61143d6d7c22bb6dfad>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98590>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98590/>. Everything for agents: <https://agentprime.io/llms.txt>.