Out-of-bounds write in Linux kernel - CVE-2026-98105

Vulnerability details

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to an out-of-bounds write in the oa_tc6 Ethernet driver when processing received data after data-chunk loss caused by receive buffer overflow errors. A remote attacker can cause oversubscribed traffic to trigger an assertion during skb_put.

Affected software

How to mitigate CVE-2026-98105

External References

• https://git.kernel.org/stable/c/172c974113bffe5723b80b1acac17593bb50513c
• https://git.kernel.org/stable/c/9d3f6e714d5f8b728837f31bbe865b64cfd3216a
• https://git.kernel.org/stable/c/b89770d493749d7c3b8649996e1089719b4eff8d
• https://git.kernel.org/stable/c/d33003e752f25c385f2cf21964123582a44f6818

Related Security Bulletins

• Out-of-bounds write in Linux kernel net ethernet driver