{
  "cveId": "CVE-2026-98419",
  "url": "https://patchblox.com/security/cve/CVE-2026-98419",
  "summary": "CVE-2026-98419 is fixed in 21 products on 1 platform, first by DEBIAN-CVE-2026-98419, released October 16, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "drop_monitor: fix out-of-bounds write in reset_per_cpu_data()",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drop_monitor: fix out-of-bounds write in reset_per_cpu_data()  In reset_per_cpu_data(), al is computed as:      al = sizeof(struct net_dm_alert_msg);     al \u002B= dm_hit_limit * sizeof(struct net_dm_drop_point);     al \u002B= sizeof(struct nlattr);      skb = genlmsg_new(al, GFP_KERNEL);     ...     nla = nla_reserve(skb, NLA_UNSPEC, sizeof(struct net_dm_alert_msg));     ...     msg = nla_data(nla);     memset(msg, 0, al);  Because al includes sizeof(struct nlattr) (the 4-byte attribute header), genlmsg_new() allocates al bytes of tailroom starting at nla. However, msg points to nla_data(nla), which is located sizeof(struct nlattr) bytes past nla. Calling memset(msg, 0, al) therefore writes al bytes starting from msg, exceeding the allocated buffer by sizeof(struct nlattr) (4 bytes) and corrupting skb_shared_info.  Fix this by letting al represent only the payload length, allocating the skb with genlmsg_new(nla_total_size(al), GFP_KERNEL), and zeroing al bytes from msg.",
  "published": "2026-10-14T14:17:53Z",
  "severity": "Moderate",
  "cvss": 7,
  "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00162,
  "epssPercentile": 0.05361,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98419",
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container-debug",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:5.15.0-326.222.4.el9uek",
      "fix": "ELSA-2026-500574",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500574",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.190-1",
      "fix": "DEBIAN-CVE-2026-98419",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98419",
      "released": "2026-10-16T15:52:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.113-1",
      "fix": "DEBIAN-CVE-2026-98419",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98419",
      "released": "2026-10-16T15:52:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.8-1",
      "fix": "DEBIAN-CVE-2026-98419",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98419",
      "released": "2026-10-16T15:52:00Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.113-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-98419",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98419",
      "released": "2026-10-16T15:52:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}