CVE Tools
Track your stack

CVE-2026-98381

veth: manage XDP program pointers during channel resize

No known exploitation. EPSS puts it in the 5th percentile. Fixed versions are out.

CVSS —Not scoredEPSS percentile5th0.2% chance in 30 daysCISA KEVNot listedNo confirmed exploitation
No public exploit knownFix1 product4 fixed builds listed below

Published Updated Sources: CVE.org, NVD

NVD CVE.org

What to do

Find your product and version, then upgrade to the build on the right.

  • LinuxAffected: ≥ 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7, < 7a8e143109ff2736dc79e41dcd55af7ceab7520aUpgrade to: 7a8e143109ff2736dc79e41dcd55af7ceab7520aAffected: ≥ 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7, < 1a5c5b9c64ba5f39dba55da6e12561ca56eeb758Upgrade to: 1a5c5b9c64ba5f39dba55da6e12561ca56eeb758Affected: ≥ 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7, < f0e8dba8c224981e53c792c6b3dbb7604fb2c2c6Upgrade to: f0e8dba8c224981e53c792c6b3dbb7604fb2c2c6Affected: ≥ 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7, < 3c10a5dd0d38f506f671dbb59e9d0ee4c72076f9Upgrade to: 3c10a5dd0d38f506f671dbb59e9d0ee4c72076f9 + 3 more branchesStated by: CVE record

Versions as the sources state them. Full version matrix after sign-in

What it is

From the CVE record

In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth_set_channels() tears down XDP resources for removed RX queues without clearing rq->xdp_prog. If the program is then detached or replaced, those queues keep the old pointer after bpf_prog_put(). A later channel increase can re-enable NAPI and run the freed program. BUG: unable to handle page fault for address: ffffc90000256048 Oops: Oops: 0000 [#1] SMP KASAN NOPTI RIP: veth_xdp_rcv_skb (include/linux/filter.h:779 include/net/xdp.h:696 drivers/net/veth.c:820) Call Trace: veth_xdp_rcv (drivers/net/veth.c:941) veth_poll (drivers/net/veth.c:986) __napi_poll (net/core/dev.c:7787) net_rx_action (net/core/dev.c:7850 net/core/dev.c:8007) handle_softirqs (kernel/softirq.c:645) Kernel panic - not syncing: Fatal exception in interrupt

In plain language

No plain-language summary for this CVE yet.

Exploitation

Where each signal puts this CVE on the scale from published to confirmed exploited.

EPSS5th
CISA KEV

Not in the catalog. CISA has not confirmed exploitation.

Public exploits

No public exploit or proof of concept found in the sources we track.

EPSS

0.2% chance of exploitation activity in the next 30 days, which ranks it in the 5th percentile of scored CVEs.

Exploit Prediction Scoring System, FIRST.org. A probability, not a confirmation.

Lifecycle

2 events over 0 days, from the signal feeds we watch.

  1. Publishedrecord updated

Affected products

Sources

References in the record

And 4 more references. See all after sign-in

In the news

Watch the software you run.

My Stack ranks new CVEs for your products by real-world exploitation, so the next serious one reaches you without reading every advisory.

We'll flag the next CVE, public exploit or patch for Linux, not every advisory.