Network Namespace Vulnerability in Linux Kernel Affecting Device Management
CVE-2026-98073

7.8HIGH

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
25 September 2026

What is CVE-2026-98073?

A key vulnerability has been identified in the Linux Kernel related to network namespace handling, specifically affecting the management of conflicting alternative names during device assignment. When multiple devices are created in different network namespaces but share the same alternative names, the removal of a non-root namespace can lead to unexpected behavior. This vulnerability impacts functionalities within cfg80211 and cfg802154 related to network namespace transitions and requires careful attention to avoid potential disruption of device resources. This issue has been addressed in recent kernel patches to enhance namespace handling and ensure a stable network environment.

Affected Version(s)

Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc

Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc

Linux 36fbf1e52bd3ff8a5cb604955eedfc9350c2e6cc

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.