Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98647

bpf: Fix divide-by-zero in btf_struct_walk()

No CVSS scoreEPSS 0.0017 · 6th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:20 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 1ea3820937f8022e044c41c6e95c84b02741b45f git
  • affected 9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 172756f02663ad45c889c001c1a8cb4082a01a05 git
  • affected 9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 934e9ba9f8d05656a48624710be67ca4dc8482e6 git
  • affected 9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 63af086cb5fa6f72fd924f86bea4c2194da663a2 git
  • affected 9c5f8a1008a121e4c6b24af211034e24b0b63081 to before 8eb4cd72daad3a9ee63d2281bbdd16ce6d9406b1 git
  • affected 9c5f8a1008a121e4c6b24af211034e24b0b63081 to before b8fa56722e9c43bcd59c51fe4c7edd5f4158a11b git
  • affected 9c5f8a1008a121e4c6b24af211034e24b0b63081 to before b0b3dc66529676228cb938cbcad66920f735c223 git
Other versions: unaffected
Linux Linux
  • affected 5.8
  • unaffected before 5.8 semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.55 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98647
CNA
Linux
Tags
Published
18 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0017, the 6th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.