01 Record

CVE-2026-98550

tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.67% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 52.0% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Received. NVD last modified this record on 2026-10-24.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-10-18 15:18Z10 DAYS AGO

Last updated

2026-10-24 14:09Z4 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-191Integer Underflow (Wrap or Wraparound)Base

Data version

5.2

Document digest

0caddb4bc3799301f4ce98523d0f3d58e93ac14335a6aaa0b2c1b8ada8adb9f0

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2f487712b89376fce267223bbb0db93d393d4b09 to < edc6593c442278fceff0120e8cc58bc592168c35, 2f487712b89376fce267223bbb0db93d393d4b09 to < 9b94a90651e1fa573c6ac6a5a6b269d5874df2c0, 2f487712b89376fce267223bbb0db93d393d4b09 to < 507a27435b2bb1f22e3a3674f6a6553eb815021b, 2f487712b89376fce267223bbb0db93d393d4b09 to < 80a9ccfc24d3776ef6753a57315e726475fac7d7, 2f487712b89376fce267223bbb0db93d393d4b09 to < 478fb08d0c2a53002a721d22b8d6681ec971d90f, 2f487712b89376fce267223bbb0db93d393d4b09 to < 12cc3a1eac5a2a06b67a7b85f0f48ff241a94d1b, 2f487712b89376fce267223bbb0db93d393d4b09 to < b0e517961f09b9f60d338d1ea4e17aacdbf206f0, 2f487712b89376fce267223bbb0db93d393d4b09 to < 99cc2a62e07a44a22254d7beca9ef1f8ad886d0d, 4.15—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/edc6593c442278fceff0120e8cc58bc592168c35
git.kernel.orghttps://git.kernel.org/stable/c/9b94a90651e1fa573c6ac6a5a6b269d5874df2c0
git.kernel.orghttps://git.kernel.org/stable/c/507a27435b2bb1f22e3a3674f6a6553eb815021b
git.kernel.orghttps://git.kernel.org/stable/c/80a9ccfc24d3776ef6753a57315e726475fac7d7
git.kernel.orghttps://git.kernel.org/stable/c/478fb08d0c2a53002a721d22b8d6681ec971d90f
git.kernel.orghttps://git.kernel.org/stable/c/12cc3a1eac5a2a06b67a7b85f0f48ff241a94d1b
git.kernel.orghttps://git.kernel.org/stable/c/b0e517961f09b9f60d338d1ea4e17aacdbf206f0
git.kernel.orghttps://git.kernel.org/stable/c/99cc2a62e07a44a22254d7beca9ef1f8ad886d0d

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.113-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.113-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.