SB20261023213 - Numeric Truncation Error in Linux kernel core

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261023213

SB20261023213 - Numeric Truncation Error in Linux kernel core

Published: October 23, 2026

Security Bulletin ID SB20261023213
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Numeric Truncation Error (CVE-ID: CVE-2026-98950)

CWE-ID: CWE-197 - Numeric Truncation Error

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause incorrect packet header offset calculations.

The vulnerability exists due to integer truncation in the Linux kernel's bpf_flow_dissect() function when sanitizing packet header offsets with an hlen value greater than 65535. A remote attacker can supply specially crafted packet data to cause the upper bound used for offset clamping to be truncated to 16 bits, resulting in incorrect network and transport header offsets.


Remediation

Install update from vendor's website.

References