CVE WATCH / VULNERABILITY DETAIL
CVE-2026-98495
UNKNOWNCVSS 0NVD feed
Published 18 October 2026 · tracked since 19 October 2026
Description
In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name before lookup The ARP ioctl copies a user-provided struct arpreq into a stack object. Its arp_dev field may contain IFNAMSIZ bytes without a NUL terminator. Such input is passed to dev_get_by_name_
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog