Skip to main content
CVE-2026-98647VulnerabilityPublished Updated

btf_struct_walk() · bpf: Fix divide-by-zero

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98647· High

Not known to be exploited · fixed in b8fa56722e9c43bcd59c51fe4c7edd5f4158a11b : patch Microsoft soon.

Data as of 2 Nov 2026, 08:45 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in b8fa56722e9c43bcd59c51fe4c7edd5f4158a11b, b0b3dc66529676228cb938cbcad66920f735c223, 172756f02663ad45c889c001c1a8cb4082a01a05 +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 1 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 9c5f8a1008a121e4c6b24af211034e24b0b63081, < b8fa56722e9c43bcd59c51fe4c7edd5f4158a11b
Fixed in
  • b8fa56722e9c43bcd59c51fe4c7edd5f4158a11b
LinuxLinuxAffected
  • ≥ 9c5f8a1008a121e4c6b24af211034e24b0b63081, < b0b3dc66529676228cb938cbcad66920f735c223
Fixed in
  • b0b3dc66529676228cb938cbcad66920f735c223
LinuxLinuxAffected
  • ≥ 9c5f8a1008a121e4c6b24af211034e24b0b63081, < 172756f02663ad45c889c001c1a8cb4082a01a05
Fixed in
  • 172756f02663ad45c889c001c1a8cb4082a01a05
LinuxLinuxAffected
  • ≥ 9c5f8a1008a121e4c6b24af211034e24b0b63081, < 934e9ba9f8d05656a48624710be67ca4dc8482e6
Fixed in
  • 934e9ba9f8d05656a48624710be67ca4dc8482e6
LinuxLinuxAffected
  • ≥ 9c5f8a1008a121e4c6b24af211034e24b0b63081, < 63af086cb5fa6f72fd924f86bea4c2194da663a2
Fixed in
  • 63af086cb5fa6f72fd924f86bea4c2194da663a2
LinuxLinuxAffected
  • ≥ 9c5f8a1008a121e4c6b24af211034e24b0b63081, < 8eb4cd72daad3a9ee63d2281bbdd16ce6d9406b1
Fixed in
  • 8eb4cd72daad3a9ee63d2281bbdd16ce6d9406b1

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

A divide-by-zero vulnerability exists in the btf_struct_walk() function affecting Microsoft products version 3.0 and 4.0. The issue has been publicly disclosed but lacks detailed technical information and CVSS scoring.

References

Community reviews

Loading reviews…