What is CVE-2026-98030?

CVE-2026-98030 is a high-severity vulnerability in Linux. CVSS score: 7.0/10. Published 2026-09-25.

How severe is CVE-2026-98030?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Linux

CVE-2026-98030

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size bcm_sf2_cfp_rule_get_all() walks the whole cfp.unique bitmap into rule_locs[] without consulting nfc->rule_cnt, which is how many entries the caller had room for. ETHTOOL_GRXCLSRLALL requires no CAP_NET_ADMIN and the ioctl sizes the buffer from the rule_cnt userspace passes in, so once an admin has installed CFP rules any user can ask for fewer slots than there are rules and run off the end of the allocation. A rule_cnt of 0 leaves the buffer pointer NULL and the walk dereferences it.

Published 2026-09-25 · last modified 2026-09-25.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Linux — versions 4.11

References

Frequently asked questions

What is CVE-2026-98030?: CVE-2026-98030 is a high-severity vulnerability in Linux. CVSS score: 7.0/10. Published 2026-09-25.
How severe is CVE-2026-98030?: High severity. CVSS v3 base score is 7.0 out of 10.