Reference page — cumulative record through Thursday, October 8, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0012 1.8 —
AFFECTED Product Versions Fixed Linux 490cb412007de593e07c1d3e2b1ec4233886707c – — Linux 6.6 – 6.6.158
TIMELINE Sep 25 Reserved by Linux Sep 25 Published (CNA: Linux) Oct 6 ENRICHED — CVE-2026-98051 (Linux). Received CVSS 5.5 and CPE data from NVD.
In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times The loop initialised next_index from intf->tx_spb_index on every iteration, so incr_ring() always produced the same result and only one slot was ever tested. Move the initialisation before the loop so each iteration advances next_index and the function correctly checks that cnt consecutive descriptor slots are available before allowing a new transmission.
| Date | Event | Detail |
|---|---|---|
| September 25, 2026 | Reserved | Reserved by Linux |
| September 25, 2026 | Published | Published (CNA: Linux) |
| October 6, 2026 | ENRICHED | ENRICHED — CVE-2026-98051 (Linux). Received CVSS 5.5 and CPE data from NVD. |
Authoritative record: CVE-2026-98051 at cve.org
Vendors: linux
Weaknesses: CWE-670
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-98051 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Thursday, October 8, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
