CVE-2026-98375

N/A

Published 2026-10-09 · Last modified 2026-10-21

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handle_incoming_queue() pulls pull_to bytes into the head before calling eth_type_trans(). pull_to is the length of the first RX slot, capped at RX_COPY_THRESHOLD, and that length comes from the backend. Nothing checks it against ETH_HLEN. If the first slot is shorter than ETH_HLEN and more slots follow, the head ends up shorter than an Ethernet header while skb->len is longer, and eth_type_trans() BUG()s in __skb_pull(). If the whole packet is shorter than ETH_HLEN, eth_type_trans() reads the header past the end of the data instead. Pull at least ETH_HLEN, and drop the packet if that fails, which also drops packets too short to hold an Ethernet header. This also checks the return value of the pull, which was ignored.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 8th percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

—CVSS · not scored

No impact metrics

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot: 2026-10-26T13:52:32.101Z

Affected

Vendors Linux

Products Linux

Weakness (CWE)

Not classified.

CVSS vector

Not yet scored.

References and research data (JSON)

Vendor product assessments

Showing 32 of 277 vendor product statements; 245 omitted. Read the full vendor advisory.

kernel as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-64k-debug-modules-extra
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-debug-core as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-debug-core
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-doc as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-doc
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-64k-debug
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-64k-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-64k-modules-extra
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-debug-modules-extra
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-uki-virt as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-uki-virt
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel.src as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel?arch=src
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-debug as a component of Red Hat Enterprise Linux 6 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-debug
- no fix planned: Out of support scope
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
perf as a component of Red Hat Enterprise Linux 6 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/perf
- no fix planned: Out of support scope
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-doc as a component of Red Hat Enterprise Linux 7 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-doc
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-doc as a component of Red Hat Enterprise Linux 7 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-doc
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel.src as a component of Red Hat Enterprise Linux 7 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel?arch=src
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-debug as a component of Red Hat Enterprise Linux 8 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-debug
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 8 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-ipaclones-internal
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 8 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-debug-devel
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 8 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-modules-internal
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 8 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-zfcpdump-devel
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-64k as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-64k
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-64k-debug-modules-internal as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-64k-debug-modules-internal
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-abi-stablelists as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-abi-stablelists
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-debug-modules-extra
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-ipaclones-internal
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-64k-debug
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-64k-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-64k-debug-modules-partner
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-64k-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-64k-modules-partner
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-debug-modules-extra
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-modules-internal
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-uki-virt-addons as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-uki-virt-addons
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
kernel-zfcpdump-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-zfcpdump-modules-partner
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known affected

Vendor assessment for this product only.

pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9
- none available: Affected
Red Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00

References

Advisories

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98375.json vendor-advisoryRed Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95525 ADVISORYEUVD · EUVD-2026-95525

Technical & other

https://git.kernel.org/stable/c/0542d213253eec18785a24b603b28bd385dfe4a5CVE record · Linux · Updated 2026-10-21T12:54:59.248Z
NVD · CVE-2026-98375 · Updated 2026-10-21T13:21:27.443
https://git.kernel.org/stable/c/236a17caebcff31f75bec5ff4136bde2de944e40CVE record · Linux · Updated 2026-10-21T12:54:59.248Z
NVD · CVE-2026-98375 · Updated 2026-10-21T13:21:27.443
https://git.kernel.org/stable/c/72d2f54367895d6e236b9857892e2e6b6036e067CVE record · Linux · Updated 2026-10-21T12:54:59.248Z
NVD · CVE-2026-98375 · Updated 2026-10-21T13:21:27.443
https://git.kernel.org/stable/c/e2b721bc30f40ffa7ccc36a56d4e8990b8c0538eCVE record · Linux · Updated 2026-10-21T12:54:59.248Z
NVD · CVE-2026-98375 · Updated 2026-10-21T13:21:27.443
https://git.kernel.org/stable/c/089e58805c452e52179482b1025a8e309a57f801CVE record · Linux · Updated 2026-10-21T12:54:59.248Z
NVD · CVE-2026-98375 · Updated 2026-10-21T13:21:27.443
http://xenbits.xen.org/xsa/advisory-522.htmlCVE record · CVE · Updated 2026-10-09T11:08:05.387Z
NVD · CVE-2026-98375 · Updated 2026-10-21T13:21:27.443
http://www.openwall.com/lists/oss-security/2026/10/09/3CVE record · CVE · Updated 2026-10-09T11:08:05.387Z
NVD · CVE-2026-98375 · Updated 2026-10-21T13:21:27.443
https://access.redhat.com/security/cve/CVE-2026-98375 vendor-referenceRed Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
https://bugzilla.redhat.com/show_bug.cgi?id=2548385 vendor-referenceRed Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
https://www.cve.org/CVERecord?id=CVE-2026-98375 vendor-referenceRed Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
https://nvd.nist.gov/vuln/detail/CVE-2026-98375 vendor-referenceRed Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98375.mbox vendor-referenceRed Hat · CVE-2026-98375 · Updated 2026-10-10T15:13:29+00:00

Sources: NVD · CVE.org · EPSS