CVE-2026-98250: linux
Vulnerability summary
CVE-2026-98250 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 06-10-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXP_PNFS out of nfsd4_setup_layout_type() and into the callers. That patch didn't account for the new call in nfsd4_setup_layout_type().
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu102 products
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13All versions (No fix recorded)
- linux-aws-5.19All versions (No fix recorded)
Debian1 product
- linux< 7.2.8-1
Linux1 product
- linux≥ da9baa5470dcb077a7c9806f0925c60b530c470b, < 30335038d4e25cf017abb0562f4f4eace4f58f96 | ≥ da9baa5470dcb077a7c9806f0925c60b530c470b, < f76017a7663c4ce5e379f8a8d39f032bdb1fd865 | 7.2
3 vendors · 104 products