CVE-2026-98569Medium· 4.4▾ SunlitA flaw was found in the Linux kernel's Generic Routing Encapsulation (GRE) subsystem. A local user with network administration privileges could cause a Denial of Service (DoS) by enabling metadata collection on an existing GRE network devi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 24.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
Last analysed / modified upstream
0.2%
— → 4.4
none → medium
0.2% → 0.2%
A flaw was found in the Linux kernel's Generic Routing Encapsulation (GRE) subsystem. A local user with network administration privileges could cause a Denial of Service (DoS) by enabling metadata collection on an existing GRE network device through a netlink interface modification request. Because the kernel fails to verify tunnel uniqueness during link modifications, this operation can overwrite shared metadata lookup entries, breaking packet reception for other active tunnel devices in the same network namespace when either device is removed.
kernel: ip_gre: Reject enabling collect metadata through changelink — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-20.
Affected:
No fix planned:
Out of support scope
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-39689Medium· 6.4kernel: ftrace: Also allocate and copy hash for reading of filter files (CVE-2025-39689)
CVE-2026-106071Low· 3.6nodejs: nodejs: Permission model bypass via wildcard path matching flaw (CVE-2026-106071)
CVE-2026-106070Low· 3.7nodejs: Node.js: Security inspection bypass via crafted ZIP archive header mismatch (CVE-2026-106070)
CVE-2026-98873Low· 3.3kernel: netfilter: nf_conntrack_expect: zero at allocation time (CVE-2026-98873)
CVE-2026-98871Medium· 4.1kernel: crypto: ccp - Fix possible deadlock in SEV init failure path (CVE-2026-98871)
CVE-2026-98876Medium· 4.1kernel: host1x: bus: Fix missing ops null check in error teardown (CVE-2026-98876)