CVE record · CVE-2026-98590

bpf: Fix bpf_sock context code generation

No CVSS scoreEPSS 0.0022 · 12th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:19 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before e3ddcf4aeb342d4de2e5761c7042270d454752de git
  • affected c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before 4a41d064facc3330e176ecbbf5b0026ed18a5c69 git
  • affected c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before 70288599d1754e157df8326239316dbdf08ea33c git
  • affected c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before ea4dc96c902ccfa49dd3e4f23c443dab4a74b018 git
  • affected c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before b3f37afc7fd7c52bc2114310aff1eb24c7cd4d73 git
  • affected c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before d95dd5a6c6cd08d5ae466d3aed27b3cf59155a6c git
  • affected c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before 84ebb991ae985149079ae9ab51b7e3ba25a9ff53 git
  • affected c3c16f2ea6d20159903cf93afbb1155f3d8348d5 to before 4a4852376e3a2727ea40e61143d6d7c22bb6dfad git
Other versions: unaffected
Linux Linux
  • affected 5.8
  • unaffected before 5.8 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.55 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98590
CNA
Linux
Published
18 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0022, the 12th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.