{"id":"CVE-2026-98434","kind":"vulnerability","aliases":["CVE-2026-98434"],"related":[],"title":"Linux kernel: sysctl millisecond-to-jiffies conversion skips range check","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsysctl: Check range in  proc_dointvec_ms_jiffies_minmax\n\nAdd the range check to do_proc_int_conv_ms_jiffies_minmax that commit\nd174174c6776 (\"sysctl: replace SYSCTL_INT_CONV_CUSTOM macro with\nfunctions\") incorrectly removed.","summary":"A Linux kernel commit removed a range check from the sysctl handler that converts millisecond values to jiffies. The sources do not say what an attacker gets from the missing check.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","linux"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T15:16:53+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","triaged_at":"2026-10-25T05:27:37+00:00","updated_at":"2026-10-25T05:27:37+00:00","category":"infrastructure","confidence":0.35,"triage":{"at":"2026-10-25T05:27:37Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel: sysctl millisecond-to-jiffies conversion skips range check","impact":"low","summary":"A Linux kernel commit removed a range check from the sysctl handler that converts millisecond values to jiffies. The sources do not say what an attacker gets from the missing check.","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel"],"confidence":0.35,"needs_auth":"unknown","worst_case":"unknown","analyst_note":"Find the upstream kernel fix commit and the affected kernel versions, and confirm what an unprivileged caller can trigger through the sysctl path (see NVD CVE-2026-98434).","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.0005,"input_tokens":3339,"output_tokens":333,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98434':14A,17A 'add':71C 'attack':46B 'check':11A,28B,51B,63C,74C 'commit':24B,84C 'conv':79C,90C 'convers':8A 'convert':34B 'custom':91C 'cve':12A,15A 'd174174c6776':85C 'dointvec':67C 'follow':57C 'function':94C 'get':47B 'handler':32B 'incorrect':95C 'infrastructur':18B 'int':78C,89C 'jiffi':7A,38B,69C,81C 'kernel':2A,19B,23B,55C 'linux':1A,20B,22B,54C 'macro':92C 'millisecond':5A,35B 'millisecond-to-jiffi':4A 'minmax':70C,82C 'miss':50B 'ms':68C,80C 'proc':66C,77C 'rang':10A,27B,64C,73C 'remov':25B,96C 'replac':87C 'resolv':61C 'say':43B 'skip':9A 'sourc':40B 'sysctl':3A,31B,62C,86C,88C 'valu':36B 'vulner':58C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T15:16:53+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98434","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98434","severity":null,"published_at":"2026-10-18T15:16:53+00:00","modified_at":"2026-10-19T10:18:51+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}