What is CVE-2026-98873?

CVE-2026-98873 is a unscored severity Linux kernel vulnerability. CVE-2026-98873 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98873?

CVE-2026-98873 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-98873?

Yes, CVE-2026-98873 has been patched. Fixed versions include 5.10.271, 5.15.222, 6.1.189 and others.

Is CVE-2026-98873 actively exploited?

CVE-2026-98873 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98873

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days. Intentionally keeps _init as-is because we could theoretically support re-init, so add the missing exp->dir there.

Package Linux Kernel

Published 2026-10-23

Last modified 2026-10-23

Patch available

Yes

Affected versions

Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2 and their respective stable series.

Fixed in

✓ 5.10.271 5.10.x ✓ 5.15.222 5.15.x ✓ 6.1.189 6.1.x ✓ 6.6.158 6.6.x ✓ 6.12.111 6.12.x ✓ 6.18.53 6.18.x ✓ 7.2

References

7 total

Showing 5 of 7 references View all on NVD

Frequently asked questions

What is CVE-2026-98873?

CVE-2026-98873 is a unscored severity Linux kernel vulnerability . CVE-2026-98873 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-98873?

Yes. CVE-2026-98873 has been patched. Fixed versions include 5.10.271, 5.15.222, 6.1.189 and others.
Is CVE-2026-98873 actively exploited?

No. CVE-2026-98873 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.