In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth_set_ch…
CVE-2026-98381 · GHSA-82qv-gm43-p9vj · EUVD-2026-95536 · published 9 Oct 2026
How serious is it
- Severity: high, CVSS score 7.8 out of 10.
- No exploit prediction (EPSS) score yet.
- Not on the CISA list of exploited vulnerabilities.
- No public exploit in Exploit-DB.
Is your app affected by CVE-2026-98381?
Paste this prompt into Claude Code, Cursor or any AI coding tool: it runs a free Shippable scan of your project and fixes what it finds. Built with Lovable, Bolt or v0? Scan your live app. Or upload your package file.
Who is affected
- Linux Linux: patch: 0
- Linux Linux: patch: 6.6.158
- Linux Linux: 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 <25bb7c36225220d30f404d7e29d2e052bc5f4b99
- Linux Linux: 5.15
- Linux Linux: 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 <7a8e143109ff2736dc79e41dcd55af7ceab7520a
- Linux Linux: patch: 6.1.189
- Linux Linux: 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 <43f6b647f209591b1e3f726bb16b8dcba6b95908
- Linux Linux: 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 <7104a370714346b667712913dc16abf14bbc97ed
- Linux Linux: 4752eeb3d891c27905a8fdf4d80e899c0efd4ec7 <1a5c5b9c64ba5f39dba55da6e12561ca56eeb758
- Linux Linux: patch: 6.18.55
How to check
- Find out whether you run the affected product and which version, then compare it with the versions above.
How to fix
Copies a prompt for Claude Code, Cursor or Codex that asks it to check whether you run this product.
- Apply the vendor's update or mitigation from the references below. If there is none yet, limit exposure of the affected service until there is.
- If a vulnerable version was live, check your logs and rotate the secrets that server could read.
The advisory
In the Linux kernel, the following vulnerability has been resolved:
veth: manage XDP program pointers during channel resize
veth_set_channels() tears down XDP resources for removed RX queues
without clearing rq->xdp_prog. If the program is then detached or
replaced, those queues keep the old pointer after bpf_prog_put().
A later channel increase can re-enable NAPI and run the freed program.
BUG: unable to handle page fault for address: ffffc90000256048
Oops: Oops: 0000 [#1] SMP KASAN NOPTI
RIP: veth_xdp_rcv_skb (include/linux/filter.h:779
include/net/xdp.h:696 drivers/net/veth.c:820)
Call Trace:
veth_xdp_rcv (drivers/net/veth.c:941)
veth_poll (drivers/net/veth.c:986)
__napi_poll (net/core/dev.c:7787)
net_rx_action (net/core/dev.c:7850 net/core/dev.c:8007)
handle_softirqs (kernel/softirq.c:645)
Kernel panic - not syncing: Fatal exception in interrupt
Check your whole app
Dependencies are only half of it. Free and read-only: before you push, run npx shippable-dev scan localhost:3000 in your project folder, no account needed. For your live app, you prove it's yours with a one-line tag first.
References
- git.kernel.org/stable/c/7a8e143109ff2736dc79e41dcd55af7ceab7520a
- git.kernel.org/stable/c/1a5c5b9c64ba5f39dba55da6e12561ca56eeb758
- git.kernel.org/stable/c/f0e8dba8c224981e53c792c6b3dbb7604fb2c2c6
- git.kernel.org/stable/c/3c10a5dd0d38f506f671dbb59e9d0ee4c72076f9
- git.kernel.org/stable/c/25bb7c36225220d30f404d7e29d2e052bc5f4b99
- git.kernel.org/stable/c/43f6b647f209591b1e3f726bb16b8dcba6b95908
- git.kernel.org/stable/c/7104a370714346b667712913dc16abf14bbc97ed
Merged from ENISA EUVD. Last updated 25 Oct 2026. All vulnerabilities · RSS · JSON