CVE record · CVE-2026-98614

sctp: avoid livelock while updating retransmit path

No CVSS scoreEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:19 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 to before 3fe624c3843694ab096fdb198526ba0c659febbe git affected 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 to before 43410c1f2db53516e95ddd7e5b4b02f495b78121 git affected 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 to before d893a7cc1cb41dd510f338bb2bfd8f29b14eaf49 git affected 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 to before 83b1a7f9e718828ef364a7b004254ebb2d0035fe git affected 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 to before 173610fff55022a5ad1579fbcc7faa97467b58b7 git affected 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 to before c9338057df1025f578fe7d0ff08bada87b8b838d git affected 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 to before ddc34cc0834c873871e88b055ee6a260676efe97 git affected 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 to before d2c31b837406395e576afeb25958c98e9938f3f6 git affected 8ceaec02b17397d12719a282945abc95f8149d9f git affected d2c2bdcdd8c5ce3d2a68aa3353ed1f340c3e500e git affected 3.10.106 to before 3.11 semver affected 3.12.71 to before 3.13 semver Other versions: unaffected
Linux	Linux	affected 3.14 unaffected before 3.14 semver unaffected 5.10.271 to 5.10., inclusive semver unaffected 5.15.222 to 5.15., inclusive semver unaffected 6.1.189 to 6.1., inclusive semver unaffected 6.6.158 to 6.6., inclusive semver unaffected 6.12.112 to 6.12., inclusive semver unaffected 6.18.55 to 6.18., inclusive semver unaffected 7.2.9 to 7.2., inclusive semver unaffected 7.3 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-98614
CNA: Linux
Tags: Linux kernel
Published: 18 Oct 2026
Updated: 19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.0018, the 7th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.