Get real-time updates on Telegram
CVE-2026-98027: Linux 5.4
CVE-2026-98027. CVSS 3.1 base score 7.0 (HIGH, Source advisory). EPSS 0.00121 (percentile 0.01709), scored 03-Oct-2026.
Affected technology
Linux · da7dc87553046a43be1620a783ce3d9f6583d322 to before 7e4bfc5f0b66feb22cba821303fc25ca22cd0887, da7dc87553046a43be1620a783ce3d9f6583d322 to before 01124cd2cf4b71755b1130ac82d78dcfbd5d69e3, da7dc87553046a43be1620a783ce3d9f6583d322 to before 609c4378f212cf580aae02250f1146caf63d873f, da7dc87553046a43be1620a783ce3d9f6583d322 to before c5b5c52b6524c9fb50def2260baac745c095ec3a, da7dc87553046a43be1620a783ce3d9f6583d322 to before 44cd4674d9aa5bdf793b8a8b481c9e8536ed6070, da7dc87553046a43be1620a783ce3d9f6583d322 to before 7a683c2b062810bca203e41866389daf387c235b, da7dc87553046a43be1620a783ce3d9f6583d322 to before cda5ac8fe8ac8e80b1703ebb8c4250726fc19739, da7dc87553046a43be1620a783ce3d9f6583d322 to before b1fffc273112e7284c5b705e186b43b5770cd3d5
Linux
Linux · 5.4
Linux
Component: Not specified by the source
File: drivers/net/dsa/mv88e6xxx/chip.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
An admin has installed policy rules any user can ask for fewer slots than there are rules and run off the end of the allocation. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high.
- CCR priority
- 28.0 /100 (P4)
- CVSS 3.1
- 7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00122 · percentile 0.01782 · 2026-10-17
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-98027.html