Skip to main content
CVE-2026-98554VulnerabilityPublished Updated

vlan_dev_hard_header() · vlan: ensure sufficient headroom

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98554· Medium

Not known to be exploited · fixed in cfba0f45553de2b803059e3d539a1e418df24da8 : update Microsoft when convenient.

Data as of 2 Nov 2026, 10:58 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 12% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in cfba0f45553de2b803059e3d539a1e418df24da8, cd5dd68267c4238795fadaf02b3575ca3f8a6500, ca797491f0ae4bfde9039f79f6f1ed7781c9110f +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < cfba0f45553de2b803059e3d539a1e418df24da8
Fixed in
  • cfba0f45553de2b803059e3d539a1e418df24da8
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < cd5dd68267c4238795fadaf02b3575ca3f8a6500
Fixed in
  • cd5dd68267c4238795fadaf02b3575ca3f8a6500
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ca797491f0ae4bfde9039f79f6f1ed7781c9110f
Fixed in
  • ca797491f0ae4bfde9039f79f6f1ed7781c9110f
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c7ee4bea64f559ea8e03260014775b64c720cb5b
Fixed in
  • c7ee4bea64f559ea8e03260014775b64c720cb5b
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 90d51095371d96747f45bbd8504edf6513e039ef
Fixed in
  • 90d51095371d96747f45bbd8504edf6513e039ef
LinuxLinuxAffected
  • ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 55e007fc3b4d76fa4d6b4660f6904fe6ab045a1b
Fixed in
  • 55e007fc3b4d76fa4d6b4660f6904fe6ab045a1b

Description

CVE-2026-98554 is a vulnerability related to VLAN handling in Microsoft software versions 3.0 and 4.0. The issue involves ensuring sufficient headroom in the vlan_dev_hard_header() function. No detailed impact or exploitation information is provided.

References

Community reviews

Loading reviews…