Answer in brief
CVE-2026-98569 records a Unknown severity vulnerability in ip_gre: Reject enabling collect metadata through changelink. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2e15ea390e6f4466655066d97e22ec66870a042c <c80315da84998b69b8829785a174b0bf72a81992 || >=2e15ea390e6f4466655066d97e22ec66870a042c <cff8b520312e750ad38967c30128e1534cbf9484 || >=2e15ea390e6f4466655066d97e22ec66870a042c <1dc759571f3df14891175fc52527f7624ba01322 || >=2e15ea390e6f4466655066d97e22ec66870a042c <da2e0cfbb620b199927a1e5b93b7cfde32083c7d || >=2e15ea390e6f4466655066d97e22ec66870a042c <2e54d53b65e296b4b4bdc2cdd3b2b58dfa8d8c5c || >=2e15ea390e6f4466655066d97e22ec66870a042c <bdd41b96e814300c66222cf4e47ecb8aef995656 || >=2e15ea390e6f4466655066d97e22ec66870a042c <63c5e48d6f7f5722a48f63e13e961dc5302894ed || >=2e15ea390e6f4466655066d97e22ec66870a042c <a3f315be9d30eeb6938d11fa17fd4b32d52f7c42 | c80315da84998b69b8829785a174b0bf72a81992, cff8b520312e750ad38967c30128e1534cbf9484, 1dc759571f3df14891175fc52527f7624ba01322, da2e0cfbb620b199927a1e5b93b7cfde32083c7d, 2e54d53b65e296b4b4bdc2cdd3b2b58dfa8d8c5c, bdd41b96e814300c66222cf4e47ecb8aef995656, 63c5e48d6f7f5722a48f63e13e961dc5302894ed, a3f315be9d30eeb6938d11fa17fd4b32d52f7c42 |
| Linux/Linuxgeneric | 4.3 | Not reported |
Published upstream
Oct 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 18, 2026
In the Linux kernel, the following vulnerability has been resolved: ip_gre: Reject enabling collect metadata through changelink ipgre_netlink_parms() can enable collect_md on an existing GRE, GRETAP or ERSPAN device. Unlike newlink, changelink does not enforce metadata tunnel uniqueness. Converting a non-metadata device can therefore replace the metadata receive entry for another device of the same type in the same netns. Deleting either device then clears the shared entry, breaking metadata receive lookup for the surviving device. If parameter validation fails after collect_md is set, deleting the modified device can also clear an entry it never owned. Reject enabling metadata mode in both changelink callbacks before any encapsulation or tunnel parameters are modified. Allow requests that repeat the metadata attribute on an existing metadata device.
Quoted source text, attributed separately from HOL analysis.