CVE-2026-98495
Received Received - Intake

ARP Name Termination Bypass in Linux Kernel

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name before lookup The ARP ioctl copies a user-provided struct arpreq into a stack object. Its arp_dev field may contain IFNAMSIZ bytes without a NUL terminator. Such input is passed to dev_get_by_name_rcu() or __dev_get_by_name(), where strcmp() can read past the end of the stack object when a matching alternative interface name exists. Terminate the field before the lookup to prevent the out-of-bounds read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98495
EUVD
EUVD-2026-103735

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
Linux Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc
Linux Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc
Linux Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc
Linux Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc
Linux Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc
Linux Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc
Linux Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc
Linux Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc
Linux Linux 5.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves an out-of-bounds read in the ARP ioctl handling. A user-provided struct arpreq with an arp_dev field containing up to IFNAMSIZ bytes without a NUL terminator can cause strcmp() to read past the stack object's end when a matching interface name exists. The fix ensures the field is properly terminated before lookup.

Detection Guidance

This vulnerability involves an out-of-bounds read in the Linux kernel's ARP ioctl handling. Detection requires checking kernel versions and ARP-related configurations. Use uname -a to verify kernel version and grep for ARP-related modules or ioctl calls in system logs. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow local users to read sensitive kernel memory or cause a system crash by triggering an out-of-bounds read. It may lead to information disclosure or denial-of-service if exploited.

Mitigation Strategies

Apply the latest kernel patches from your Linux distribution to resolve the issue. Update the kernel to a version containing the fix for CVE-2026-98495. Monitor vendor advisories for specific patch availability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98495. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart