Use of multiple resources with duplicate identifier in Linux kernel - CVE-2026-98629

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU156940

Use of multiple resources with duplicate identifier in Linux kernel - CVE-2026-98629

Published: October 22, 2026


Vulnerability identifier: #VU156940
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-98629
CWE-ID: CWE-694
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local privileged user to disrupt traffic classification and exhaust hash-table identifiers.

The vulnerability exists due to inconsistent identifier mapping in the Linux kernel u32 traffic classifier when allocating and deleting hash tables with explicit handles. A local privileged user can create and delete specially selected manual hash tables to leave identifier entries permanently allocated, remove entries belonging to unrelated live tables, and cause duplicate handles that direct hash-table lookups and TCA_U32_LINK references to the wrong table.


Affected software

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

How to mitigate CVE-2026-98629

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

External References

Related Security Bulletins