CVE-2026-98031
In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in remove_nh_grp_entry() remove_nh_grp_entry() prints the extack message when a listener fails to replace the reduced nexthop group. However, extack is not initialized and listeners are not required to set a message when returning an error. Neither netdevsim nor mlxsw do so when an allocation fails, resulting in the dereference of an uninitialized stack pointer. Fix by zero-initializing extack, as was done in commit 6347c5314cee ("nexthop: initialize extack in nh_res_bucket_migrate()").
Affected versions
Linux kernel versions
5.11
and later are affected. Fixed in
5.15.222,
6.1.189,
6.6.158,
6.12.111,
6.18.53,
7.2.7,
7.3-rc3
and their respective stable series.
References
7 totalFrequently asked questions
-
What is CVE-2026-98031?
CVE-2026-98031 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.11 onward and has been patched in 5.15.222, 6.1.189, 6.6.158 and others. CVE-2026-98031 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98031?
Yes. CVE-2026-98031 has been patched. Fixed versions include 5.15.222, 6.1.189, 6.6.158 and others. If you are running Linux kernel 5.11 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98031 actively exploited?
No. CVE-2026-98031 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.