CVE-2026-98959
Linux Linux
- Linux Linux
- Critical
- CVSS 9.8
- EPSS 0.61%
- Fixed version listed
What to do
Fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| Linux Linux | from 3.10.83, before 3.11; from 3.12.45, before 3.13; from 3.14.47, before 3.15; from 3.18.19, before 3.19 | 3.11, 3.13, 3.15 |
| Linux Linux | every version except: before 3.19; from 6.6.160 through 6.6.*; from 6.12.113 through 6.12.*; from 6.18.57 through 6.18.*; from 7.2.11 through 7.2.*; from 7.3 on | 6.6.160, 6.12.113, 6.18.57, 7.2.11, 7.3 |
The CVE record lists 9 ranges this page cannot state exactly.
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.8 (v3.1, scored by Linux)
- EPSS
- 0.61% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 26, 2026)
- Vendor
- Linux, Linux
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.