Get real-time updates on Telegram
CVE-2026-98029: Linux 6.8
CVE-2026-98029. CVSS 3.1 base score 7.0 (HIGH, Source advisory). EPSS 0.00121 (percentile 0.01764), scored 17-Oct-2026.
Affected technology
Linux · 9eb03bb1c035ff6e2c3a34046419446588253dda to before 82812583b9c69c241da6da4186f14e9df2516488, 9eb03bb1c035ff6e2c3a34046419446588253dda to before a7e023c63e855761c1426cee8d17c2bca32aa339, 9eb03bb1c035ff6e2c3a34046419446588253dda to before ecebfdaab72a504c10f4907bd00fc3b705ec3b12, 9eb03bb1c035ff6e2c3a34046419446588253dda to before f1986bf87b0709c95126fe196cf39e5b8c8453a1
Linux
Linux · 6.8
Linux
Component: Not specified by the source
File: drivers/net/ethernet/netronome/nfp/nfp_net_ethtool.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Has installed flow steering rules any user can ask for fewer slots than there are rules and run off the end of the allocation. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high.
- CCR priority
- 28.0 /100 (P4)
- CVSS 3.1
- 7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00121 · percentile 0.01764 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-98029.html