CVE-2026-98495net: arp: terminate device name before lookup
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name before lookup The ARP ioctl copies a user-provided struct arpreq into a stack object. Its arp_dev field may contain IFNAMSIZ bytes without a NUL terminator. Such input is passed to dev_get_by_name_rcu() or __dev_get_by_name(), where strcmp() can read past the end of the stack object when a matching alternative interface name exists. Terminate the field before the lookup to prevent the out-of-bounds read.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc before ae6d704dbf9542b0a0830ec91a2db4f30307e7d8; from 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc before 47107491b48ceef0a2faa7a010cfa961f211ef9f; from 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc before 7389757d88f54237951d7497d9c4dae7cc6d64be; 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc builds before 1b08c5c3ac27c9ff91c5309f4a32b4e91ce2263b; from 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc before 414bbad9928598904313299ac9e037a73f520be1; from 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc before ba664d83638640cf454b65167339cbf20dfd6f10; 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc builds before 35e716a70733472ede300540082d64c33bf3b4c9; from 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc before d8b6529e80bcb4fb8177121404cbb3377acaebd2 | CNA record |
References
- https://git.kernel.org/stable/c/ae6d704dbf9542b0a0830ec91a2db4f30307e7d8
- https://git.kernel.org/stable/c/47107491b48ceef0a2faa7a010cfa961f211ef9f
- https://git.kernel.org/stable/c/7389757d88f54237951d7497d9c4dae7cc6d64be
- https://git.kernel.org/stable/c/1b08c5c3ac27c9ff91c5309f4a32b4e91ce2263b
- https://git.kernel.org/stable/c/414bbad9928598904313299ac9e037a73f520be1
- https://git.kernel.org/stable/c/ba664d83638640cf454b65167339cbf20dfd6f10
- https://git.kernel.org/stable/c/35e716a70733472ede300540082d64c33bf3b4c9
- https://git.kernel.org/stable/c/d8b6529e80bcb4fb8177121404cbb3377acaebd2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.