What is CVE-2026-98052?

CVE-2026-98052 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, affecting Linux kernel versions from 6.6 onward and patched in 6.6.158, 6.12.111, 6.18.53 and others. CVE-2026-98052 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98052?

CVE-2026-98052 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2026-98052?

Yes, CVE-2026-98052 has been patched. Fixed versions include 6.6.158, 6.12.111, 6.18.53 and others. If you are running Linux kernel 6.6 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-98052 actively exploited?

CVE-2026-98052 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98052

High

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: clear txcb->last before writing each descriptor bcmasp_xmit() only wrote txcb->last = true for the final fragment of an SKB; non-final fragments left the field untouched. If a descriptor slot was reused while it still held a stale true from a previous SKB (possible when tx_spb_ring_full() underreported fullness), bcmasp_tx_reclaim() would see last == true mid-SKB and call dev_consume_skb_any() prematurely, freeing the sk_buff while its remaining fragments were still in flight. Unconditionally clear txcb->last before the conditional set so every descriptor slot starts from a known false state regardless of what a prior transmission left behind.

Package Linux Kernel

Published 2026-09-25

Last modified 2026-10-06

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected versions

Linux kernel versions 6.6 and later are affected. Fixed in 6.6.158, 6.12.111, 6.18.53, 7.2.7, 7.3-rc3 and their respective stable series.

Affected from

≥ 6.6

Fixed in

✓ 6.6.158 6.6.x ✓ 6.12.111 6.12.x ✓ 6.18.53 6.18.x ✓ 7.2.7 7.2.x ✓ 7.3-rc3

References

5 total

Kernel Git
https://git.kernel.org/stable/c/17e6ad484dea5ddf1c4a3d6ec77a5929161234de

Patch
Kernel Git
https://git.kernel.org/stable/c/18e5e0ec0e9282c897e2aa81a3e43ccaee03b003

Patch
Kernel Git
https://git.kernel.org/stable/c/1e213ba7cb3b9dd97ac2e0a1054e6d0d1d91f5bc

Patch
Kernel Git
https://git.kernel.org/stable/c/47a5cecca925ceb175d5adf712e667acf78f475f

Patch
Kernel Git
https://git.kernel.org/stable/c/9b26b54861ce05307d39a54ddedddf8747419614

Patch

Details

CVE ID CVE-2026-98052

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2026-09-25

Modified 2026-10-06

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-98052?

CVE-2026-98052 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . It affects Linux kernel versions from 6.6 onward and has been patched in 6.6.158, 6.12.111, 6.18.53 and others. CVE-2026-98052 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-98052?

CVE-2026-98052 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2026-98052?

Yes. CVE-2026-98052 has been patched. Fixed versions include 6.6.158, 6.12.111, 6.18.53 and others. If you are running Linux kernel 6.6 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-98052 actively exploited?

No. CVE-2026-98052 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.