Missing Release of Resource after Effective Lifetime in Linux kernel - CVE-2026-98233

Vulnerability details

The vulnerability allows a local user to cause a denial of service in packet ring reception.

The vulnerability exists due to failure to release ring slot ownership in tpacket_rcv() when virtio-net header conversion fails for an unsupported UDP GSO packet. A local user can send an unsupported UDP GSO packet to cause a denial of service in packet ring reception.

With a one-frame TPACKET_V2 ring, the only slot becomes unavailable and the next valid packet is dropped. TPACKET_V3 is not affected by this error path.

Affected software

How to mitigate CVE-2026-98233

External References

• https://git.kernel.org/stable/c/23cd30498891d29a69ec9b75bd92f8a0f21f1342
• https://git.kernel.org/stable/c/2daa618e7ff19eefcbda281bc4c5998c4140f9cf
• https://git.kernel.org/stable/c/33ff111d7ba3beb86e28938d6382bb5beabd865a
• https://git.kernel.org/stable/c/49a48a5aaf85fe69d2dc3fb334b4854fadf44e39
• https://git.kernel.org/stable/c/693209a237fc548791cf402441db8b68d1da7d38
• https://git.kernel.org/stable/c/805edbdcb8681da5f7ee43b3c3c809f7a8c31208
• https://git.kernel.org/stable/c/b8c0cb3069058c2d67b5c7c833b2833381ecffdc
• https://git.kernel.org/stable/c/bb10a0084c03a94364aeec542beddc5d49b59f59

Related Security Bulletins

• Missing Release of Resource after Effective Lifetime in Linux kernel packet
• Debian update for linux