CVE-2026-98381

Received Received - Intake

BaseFortify

Publication date: 2026-10-09

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth_set_channels() tears down XDP resources for removed RX queues without clearing rq->xdp_prog. If the program is then detached or replaced, those queues keep the old pointer after bpf_prog_put(). A later channel increase can re-enable NAPI and run the freed program. BUG: unable to handle page fault for address: ffffc90000256048 Oops: Oops: 0000 [#1] SMP KASAN NOPTI RIP: veth_xdp_rcv_skb (include/linux/filter.h:779 include/net/xdp.h:696 drivers/net/veth.c:820) Call Trace: veth_xdp_rcv (drivers/net/veth.c:941) veth_poll (drivers/net/veth.c:986) __napi_poll (net/core/dev.c:7787) net_rx_action (net/core/dev.c:7850 net/core/dev.c:8007) handle_softirqs (kernel/softirq.c:645) Kernel panic - not syncing: Fatal exception in interrupt

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-09

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-09

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98381

EUVD

EUVD-2026-95536

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Linux	Linux	4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Linux	Linux	4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Linux	Linux	4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Linux	Linux	4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Linux	Linux	4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Linux	Linux	4752eeb3d891c27905a8fdf4d80e899c0efd4ec7
Linux	Linux	5.15

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper management of XDP program pointers during network interface channel resizing. When RX queues are removed, the XDP resources are torn down without clearing the program pointer, which can lead to use-after-free issues if the program is detached or replaced. A later channel increase may re-enable NAPI and execute the freed program, causing a kernel panic.

Detection Guidance

This vulnerability is specific to the Linux kernel's veth driver and involves XDP program pointer management during channel resizing. Detection requires checking kernel logs for page faults or kernel panics related to veth_xdp_rcv_skb or veth_poll functions. Monitor for Oops messages or kernel crashes during network operations.

Impact Analysis

This vulnerability can cause system crashes due to kernel panics, leading to denial-of-service conditions. It may also allow unauthorized code execution if an attacker exploits the use-after-free scenario to run arbitrary code in the kernel context.

Compliance Impact

This vulnerability is a kernel-level issue in the Linux veth driver that could lead to kernel panic or system instability due to improper XDP program pointer management. It does not directly affect data confidentiality, integrity, or availability in a way that would violate GDPR or HIPAA compliance requirements.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Avoid using XDP programs on veth interfaces until patched. Monitor kernel logs for related errors. If affected, consider disabling veth interfaces or reducing network load to minimize exposure.

Hi! I’m here to help you understand CVE-2026-98381. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70