Integer overflow in Linux kernel - CVE-2026-98317

Vulnerability identifier: #VU153706

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98317

CWE-ID: CWE-190

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause managed neighbour probes to be scheduled with zero delay.

The vulnerability exists due to integer overflow and missing range validation in the neighbour probe interval configuration when processing interval values supplied through netlink or sysctl. A local user can supply an out-of-range probe interval to cause managed neighbour probes to be scheduled with zero delay.

The signed-integer overflow path occurs when HZ is greater than 1000, including on Alpha and MIPS.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/6d79b223ec44ada58ad37db42f539b60985a7722
• https://git.kernel.org/stable/c/8550b50e49b01b572e653e572f24ddd73949aa74
• https://git.kernel.org/stable/c/982c7f66c04134b77126edbfd8a63ecd6928cfd9

• Integer overflow in Linux kernel core
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more