Skip to main content
CVE-2026-98646VulnerabilityPublished Updated

inet_csk_listen_stop() under BPF context · tcp: Skip cond_resched()

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98646· Medium

Not known to be exploited · fixed in ee7246bccb9da66076dd8094daa48bdc761d6b76 : update Microsoft when convenient.

Data as of 2 Nov 2026, 10:58 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in ee7246bccb9da66076dd8094daa48bdc761d6b76, eaab8cab451b9502ce224cd202550375b894a467, 55bbebf2829c3f47c5a48fc261740301d0f25f48 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 4ddbcb886268af8d12a23e6640b39d1d9c652b1b, < ee7246bccb9da66076dd8094daa48bdc761d6b76
Fixed in
  • ee7246bccb9da66076dd8094daa48bdc761d6b76
LinuxLinuxAffected
  • ≥ 4ddbcb886268af8d12a23e6640b39d1d9c652b1b, < eaab8cab451b9502ce224cd202550375b894a467
Fixed in
  • eaab8cab451b9502ce224cd202550375b894a467
LinuxLinuxAffected
  • ≥ 4ddbcb886268af8d12a23e6640b39d1d9c652b1b, < 55bbebf2829c3f47c5a48fc261740301d0f25f48
Fixed in
  • 55bbebf2829c3f47c5a48fc261740301d0f25f48
LinuxLinuxAffected
  • ≥ 4ddbcb886268af8d12a23e6640b39d1d9c652b1b, < 23da88d1597ee7fdda373e1530284b763710911f
Fixed in
  • 23da88d1597ee7fdda373e1530284b763710911f
LinuxLinuxAffected
  • ≥ 4ddbcb886268af8d12a23e6640b39d1d9c652b1b, < 5b52417c6196e05618a3b5d9753dbed9adef0166
Fixed in
  • 5b52417c6196e05618a3b5d9753dbed9adef0166
LinuxLinuxAffected
  • =6.5
Fixed in–

Description

CVE-2026-98646 is a vulnerability involving the skipping of the cond_resched() function in inet_csk_listen_stop() when operating under BPF context. The vulnerability affects Microsoft products with versions 3.0 and 4.0. No detailed impact or exploitation information is provided.

References

Community reviews

Loading reviews…