# bpf: Fix divide-by-zero in btf_struct_walk()

CVE record · `CVE-2026-98647`

- **Identifiers:** `CVE-2026-98647`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 18 Oct 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:20 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 1ea3820937f8022e044c41c6e95c84b02741b45f` (git)
  - affected: `9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 172756f02663ad45c889c001c1a8cb4082a01a05` (git)
  - affected: `9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 934e9ba9f8d05656a48624710be67ca4dc8482e6` (git)
  - affected: `9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 63af086cb5fa6f72fd924f86bea4c2194da663a2` (git)
  - affected: `9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 8eb4cd72daad3a9ee63d2281bbdd16ce6d9406b1` (git)
  - affected: `9c5f8a1008a121e4c6b24af211034e24b0b63081 to before b8fa56722e9c43bcd59c51fe4c7edd5f4158a11b` (git)
  - affected: `9c5f8a1008a121e4c6b24af211034e24b0b63081 to before b0b3dc66529676228cb938cbcad66920f735c223` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.8`
  - unaffected: `before 5.8` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.112 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.55 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.9 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0017, the 6th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98647](https://www.cve.org/CVERecord?id=CVE-2026-98647)
- [NVD: CVE-2026-98647](https://nvd.nist.gov/vuln/detail/CVE-2026-98647)

### References from the CNA

- <https://git.kernel.org/stable/c/1ea3820937f8022e044c41c6e95c84b02741b45f>
- <https://git.kernel.org/stable/c/172756f02663ad45c889c001c1a8cb4082a01a05>
- <https://git.kernel.org/stable/c/934e9ba9f8d05656a48624710be67ca4dc8482e6>
- <https://git.kernel.org/stable/c/63af086cb5fa6f72fd924f86bea4c2194da663a2>
- <https://git.kernel.org/stable/c/8eb4cd72daad3a9ee63d2281bbdd16ce6d9406b1>
- <https://git.kernel.org/stable/c/b8fa56722e9c43bcd59c51fe4c7edd5f4158a11b>
- <https://git.kernel.org/stable/c/b0b3dc66529676228cb938cbcad66920f735c223>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98647>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98647/>. Everything for agents: <https://agentprime.io/llms.txt>.