CVE-2026-98619: Linux kernel · net: ethtool: keep rtnl_lock for the ioctl self test
Affects Linux kernelSource CVE Database V5
Not known to be exploited : upgrade to 4ca1503491f1f25a954c13ac5775bf6775c5abc8 or 1b82958f3f035df5ccaab5430a2302f08a5d5351 when convenient.
Data as of 26 Oct 2026, 12:55 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 4% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 4ca1503491f1f25a954c13ac5775bf6775c5abc8, 1b82958f3f035df5ccaab5430a2302f08a5d5351
Exploitation evidence
Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 4ca1503491f1f25a954c13ac5775bf6775c5abc8 or 1b82958f3f035df5ccaab5430a2302f08a5d5351.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available in the Linux kernel commits 4ca1503491f1f25a954c13ac5775bf6775c5abc8 and 1b82958f3f035df5ccaab5430a2302f08a5d5351. Users should update to a kernel version including these commits to ensure the rtnl_lock is properly held during the ethtool ioctl self test. No additional mitigation is required.
Description
A vulnerability in the Linux kernel's ethtool ioctl self test was fixed by ensuring the rtnl_lock is held during the offline self test that brings the network interface down and back up. Without this lock, the device could be reconfigured unsafely, causing warnings or assertion failures related to improper locking.