What is CVE-2026-98321?

CVE-2026-98321 is a unscored severity Linux kernel vulnerability, affecting Linux kernel versions from 4.18 onward and patched in 6.18.54, 7.2.8 and 7.3-rc4. CVE-2026-98321 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98321?

CVE-2026-98321 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-98321?

Yes, CVE-2026-98321 has been patched. Fixed versions include 6.18.54, 7.2.8 and 7.3-rc4. If you are running Linux kernel 4.18 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-98321 actively exploited?

CVE-2026-98321 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98321

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.

Package Linux Kernel

Published 2026-10-06

Last modified 2026-10-06

Patch available

Yes

Affected versions

Linux kernel versions 4.18 and later are affected. Fixed in 6.18.54, 7.2.8, 7.3-rc4 and their respective stable series.

Affected from

≥ 4.18

Fixed in

✓ 6.18.54 6.18.x ✓ 7.2.8 7.2.x ✓ 7.3-rc4

References

3 total

Frequently asked questions

What is CVE-2026-98321?

CVE-2026-98321 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 4.18 onward and has been patched in 6.18.54, 7.2.8 and 7.3-rc4. CVE-2026-98321 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-98321?

Yes. CVE-2026-98321 has been patched. Fixed versions include 6.18.54, 7.2.8 and 7.3-rc4. If you are running Linux kernel 4.18 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-98321 actively exploited?

No. CVE-2026-98321 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.