{"id":"CVE-2026-98811","title":"kernel: net/sched: cls_api: reclaim an empty proto on the error path (CVE-2026-98811)","summary":"A flaw was found in the Linux kernel's network traffic control classifier subsystem. A local attacker with network administration privileges could exploit a race condition by submitting concurrent filter addition requests that fail during …","severity":"low","cvss":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvssSource":"vendor","cwe":"CWE-772","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","affected":["enterprise_linux 10","enterprise_linux 6","enterprise_linux 8","enterprise_linux 9","openshift_container_platform 4"],"published":"2026-10-18","updated":"2026-10-23","sourceUpdated":"2026-10-23T17:45:08+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98811.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98811.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98811"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555214"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98811"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98811"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98811.mbox"},{"url":"https://git.kernel.org/stable/c/0fc74e7d97d232095ce64cb45d25f0919df7ad4a"},{"url":"https://git.kernel.org/stable/c/315e4fe65cf02ef052de5e6298c3088e448b7517"},{"url":"https://git.kernel.org/stable/c/ebc9611ab154c0cd9f1320e2a73f5e936d7535a9"},{"url":"https://git.kernel.org/stable/c/570141625d212fbbcffb9665cb45c0f04610e61a"},{"url":"https://git.kernel.org/stable/c/0bb8eab29b55045281a4963d4557f2776cdf8cfa"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00168,"epssPercentile":0.05981,"ingestedAt":"2026-10-18T16:47:32.478Z","slug":"CVE-2026-98811","body":"## Overview\n\nA flaw was found in the Linux kernel's network traffic control classifier subsystem. A local attacker with network administration privileges could exploit a race condition by submitting concurrent filter addition requests that fail during creation. Due to improper error handling, the kernel fails to properly reclaim empty protocol structures, leaving unreleased references in memory. This issue leads to a resource leak, which may result in a Denial of Service (DoS).\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, … · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98811.json)\n\n**kernel: net/sched: cls_api: reclaim an empty proto on the error path** — rated Low by Red Hat. Released 2026-10-18, updated 2026-10-23.\n\nAffected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\nNot affected:\n\n- Red Hat Enterprise Linux 7\n\n## Remediation\n\nOut of support scope","depth":"sunlit","depthScore":18,"depthScoreParts":{"impact":18.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":228675,"id":"CVE-2026-98811","ts":1792844898151,"field":"cvss","old":null,"new":"3.3"},{"seq":228674,"id":"CVE-2026-98811","ts":1792844898151,"field":"severity","old":"none","new":"low"}]}