CVE-2026-98622: Linux kernel · net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in e8fcf3f08834e939b797311742ee72b1e2a08096 : patch Linux kernel soon.
Data as of 26 Oct 2026, 12:55 UTC
Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in e8fcf3f08834e939b797311742ee72b1e2a08096, d805560ad69cb266d669341ca01e26bffb0d2c67, d512c484bd93a5f2794aa03c9faeb7bcb82dbd4a +5
Exploitation evidence
Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in the Linux kernel commits listed as fixedVersions. Users should update to a patched kernel version containing these commits to prevent this denial of service condition. No additional mitigation is required as the fix preserves existing behavior without introducing regressions.
Description
A Linux kernel vulnerability in the net/sched subsystem's act_ct module caused the kernel to WARN on benign failures of flow_offload_alloc(), which can occur under normal load conditions. This WARN could lead to a kernel panic if panic_on_warn=1 is set, allowing an unprivileged user to crash the system by racing a conntrack flush against a tc action ct commit classifier. The issue has been fixed by removing the unnecessary WARN without changing existing error handling behavior.
References
- git.kernel.org/stable/c/e8fcf3f08834e939b797311742ee72b1e2a08096 (opens in a new tab)
- git.kernel.org/stable/c/af475f599270e59313552e6c6f3af8507da672b8 (opens in a new tab)
- git.kernel.org/stable/c/424ba52c0058deeb940d02cba52eb0aeb288db33 (opens in a new tab)
- git.kernel.org/stable/c/d512c484bd93a5f2794aa03c9faeb7bcb82dbd4a (opens in a new tab)
- git.kernel.org/stable/c/d805560ad69cb266d669341ca01e26bffb0d2c67 (opens in a new tab)
- git.kernel.org/stable/c/00734f3684fcec42c319bedfe68a5d357c720b53 (opens in a new tab)
- git.kernel.org/stable/c/650787233c2fd6e515a7c5f371019a9fa080ccd2 (opens in a new tab)
- git.kernel.org/stable/c/47abe7a5c4eb53269aca3506446f851572a059a3 (opens in a new tab)