CVE-2026-98317: Linux kernel · neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in 8550b50e49b01b572e653e572f24ddd73949aa74 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 14:05 UTC
Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 8550b50e49b01b572e653e572f24ddd73949aa74, 982c7f66c04134b77126edbfd8a63ecd6928cfd9, 6d79b223ec44ada58ad37db42f539b60985a7722
Exploitation evidence
Disclosed: evidence found.
CVE published 6 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 8550b50e49b01b572e653e572f24ddd73949aa74, 982c7f66c04134b77126edbfd8a63ecd6928cfd9 or 6d79b223ec44ada58ad37db42f539b60985a7722.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available and has been applied in Linux kernel version 6.0 and subsequent commits identified by hashes 8550b50e49b01b572e653e572f24ddd73949aa74, 982c7f66c04134b77126edbfd8a63ecd6928cfd9, and 6d79b223ec44ada58ad37db42f539b60985a7722. Users should update to these fixed versions to ensure proper validation of NDTPA_INTERVAL_PROBE_TIME_MS. No additional mitigation actions are indicated.
Description
A vulnerability in the Linux kernel's neighbour subsystem involves improper validation of the NDTPA_INTERVAL_PROBE_TIME_MS parameter. The flaw allows setting this probe interval to invalid values due to missing validation and integer overflow issues, potentially causing the probe interval to be treated as zero. This affects the timing of NTF_MANAGED entry probes but is mitigated by limiting the maximum interval to one day in the fix.