SB20261022471 - Improper input validation in Linux kernel core

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261022471

SB20261022471 - Improper input validation in Linux kernel core

Published: October 22, 2026

Security Bulletin ID SB20261022471
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper input validation (CVE-ID: CVE-2026-98852)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to disrupt network communication by triggering the dropping of tunneled IPv6 packets.

The vulnerability exists due to improper validation of IPv6 extension headers in the Linux kernel's segmentation and checksum offload handling in net/core/dev.c when processing tunneled packets. A local user can generate affected tunneled traffic that reaches an incompatible software checksum fallback path, triggering kernel warnings and packet drops that disrupt network communication.


Remediation

Install update from vendor's website.

References