Is there a patch available for CVE-2026-98430?

Yes, a patch is available for CVE-2026-98430. Update the affected software to the latest version immediately.

Linux CVE-2026-98430

EUVD-2026-101079

2026-10-14 Linux

GHSA-qx8x-g48g-m39m

Information Disclosure Linux

View

Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

RDMA/efa: Keep admin queues alive while IRQ is registered

The management IRQ handler accesses both the admin completion queue and the async event queue. The driver registered the IRQ before constructing these queues and destroyed them before freeing the IRQ, so the handler's lifetime was not contained by the resources it accesses.

Initialize the queues with interrupts masked, request the IRQ, and then switch to interrupt mode. On removal, reset the device and free the IRQ before destroying the queues. Also reset the device before destroying the queues if IRQ registration fails, because the device already has their DMA addresses.

Affected VersionsENISA

Linux patch: 6.1.189

Linux patch: 6.6.158

Linux b7f5e880f3774ff1934ce272e1c3b673a3a9c414 <d2a1c0bf4139c17b8d7668322b78c28d8c5b2dd0

Linux patch: 0

Linux 5.2

Linux patch: 6.12.112

Linux b7f5e880f3774ff1934ce272e1c3b673a3a9c414 <bc7e64bad96c23fb343f47689670d0037f1a65e7

Linux b7f5e880f3774ff1934ce272e1c3b673a3a9c414 <e08aca85c02ff290f785f07acae758f0daf5f49e

Linux b7f5e880f3774ff1934ce272e1c3b673a3a9c414 <0a8a105978e5ace0d885964317c5aed8ab4c0a0c

Linux b7f5e880f3774ff1934ce272e1c3b673a3a9c414 <00f7df59543cce445cfd2f109ace88c17d8aef4d

Linux patch: 7.2.8

Linux patch: 7.3-rc4

Linux patch: 6.18.54

Linux b7f5e880f3774ff1934ce272e1c3b673a3a9c414 <cf5520d1c931a70ccce0a1a247113bcec47a42be

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Lifecycle Timeline

Patch available

Oct 14, 2026 - 15:03 EUVD

CVE Published

Oct 14, 2026 - 13:27 cve.org

UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score

0.2%

Top 89% exploitable

Data Quality

3 sources

Confidence: Low

EUVD

CVE.org

EPSS MSRC

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.