CVE-2026-98587: Linux kernel · firewire: cdev: fix back-transition for iso_resource_auto client resource
Affects Linux kernelSource CVE Database V5
Not known to be exploited : upgrade to ee1df60a0d0e8ab4b00137135733bdadd6d33dab or c6b51091cafff9ce6c03c1416aa13864d17ab97c when convenient.
Data as of 26 Oct 2026, 12:55 UTC
Rated by Threat Radar · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 8% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in ee1df60a0d0e8ab4b00137135733bdadd6d33dab, c6b51091cafff9ce6c03c1416aa13864d17ab97c
Exploitation evidence
Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to ee1df60a0d0e8ab4b00137135733bdadd6d33dab or c6b51091cafff9ce6c03c1416aa13864d17ab97c.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
The issue has been fixed in the Linux kernel with the specified commits. Users should update to the fixed versions to remediate this vulnerability. No additional mitigation steps are indicated.
Description
A vulnerability in the Linux kernel's firewire cdev component related to the iso_resource_auto client resource state management has been fixed. The issue involved an incorrect back-transition of the resource state from ISO_RES_AUTO_DEALLOC to ISO_RES_AUTO_REALLOC due to concurrent access, which could cause inconsistent resource state handling.