CVE-2026-98031
Description
In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in remove_nh_grp_entry() remove_nh_grp_entry() prints the extack message when a listener fails to replace the reduced nexthop group. However, extack is not initialized and listeners are not required to set a message when returning an error. Neither netdevsim nor mlxsw do so when an allocation fails, resulting in the dereference of an uninitialized stack pointer. Fix by zero-initializing extack, as was done in commit 6347c5314cee ("nexthop: initialize extack in nh_res_bucket_migrate()").
How to fix
- Linux Linux35d9ec61466109ef0c2de87067338d929f629527, 704319510af2179cf03955747d714ab291075c25, 17acbcd4c5a6ca3dd3f9e52eb203c9175bde609a, 030c878eaedf0449e2b5401a0a0146d0afcc645e, d643cea4248668dc493c513aa7cbc6505eb1a4a9, d80677ad7aa5bebfccfd58caa4852b65abe70561, 5bd9e4e7cdaa03879e9b73b12ab52cceb1edd55b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 833a1065eeb14437a9a0dfa9dad06ea09894e0b5 ≤ v < 35d9ec61466109ef0c2de87067338d929f629527, 833a1065eeb14437a9a0dfa9dad06ea09894e0b5 ≤ v < 704319510af2179cf03955747d714ab291075c25, 833a1065eeb14437a9a0dfa9dad06ea09894e0b5 ≤ v < 17acbcd4c5a6ca3dd3f9e52eb203c9175bde609a, 833a1065eeb14437a9a0dfa9dad06ea09894e0b5 ≤ v < 030c878eaedf0449e2b5401a0a0146d0afcc645e, 833a1065eeb14437a9a0dfa9dad06ea09894e0b5 ≤ v < d643cea4248668dc493c513aa7cbc6505eb1a4a9, 833a1065eeb14437a9a0dfa9dad06ea09894e0b5 ≤ v < d80677ad7aa5bebfccfd58caa4852b65abe70561, 833a1065eeb14437a9a0dfa9dad06ea09894e0b5 ≤ v < 5bd9e4e7cdaa03879e9b73b12ab52cceb1edd55b, 5.11 | 35d9ec61466109ef0c2de87067338d929f629527, 704319510af2179cf03955747d714ab291075c25, 17acbcd4c5a6ca3dd3f9e52eb203c9175bde609a, 030c878eaedf0449e2b5401a0a0146d0afcc645e, d643cea4248668dc493c513aa7cbc6505eb1a4a9, d80677ad7aa5bebfccfd58caa4852b65abe70561, 5bd9e4e7cdaa03879e9b73b12ab52cceb1edd55b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.