CVE-2026-98248: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-98248DEBIAN-CVE-2026-98248
Published 06-10-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-98248 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.2% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.20%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:12131-1

Timeline

  1. 06-10-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on {8,16}-bit types The assembly for __percpu_##name##_case_##sz() and __percpu_##name##_return_case_##sz() doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a 32-bit memory location, and consequently {8,16}-bit ops will erroneously read and write 32 bits of memory when the LSE instruction is used. Fix this by appending 'sfx' to 'op_lse' to LSE instruction. It is not necessary (and not valid) to append 'sfx' to 'op_llsc', as 'op_llsc' is a register-register operation which does not access memory (and does not take a size suffix).

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

9%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

06-10-202621-10-2026
EPSS score
0.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu165 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.12.113-1 | < 7.2.8-1
Linux1 product
  • linux≥ 959bf2fd03b59fc107584c21425f3dc73c49f762, < d69ab4480e49bf925f4781afcc9f284affcb96b6 | ≥ 959bf2fd03b59fc107584c21425f3dc73c49f762, < 390742871a723b52de9b92a94c0d1c85a2531e3e | ≥ 959bf2fd03b59fc107584c21425f3dc73c49f762, < 843ace1d0a39e9b1cfcbfb3856a7b0fbdd9cd003 | ≥ 959bf2fd03b59fc107584c21425f3dc73c49f762, < 8cf2093f5372952a9ebc805c418d45df7112cd14 | 5.0

3 vendors · 167 products

References

8 links