Numeric Truncation Error in Linux kernel - CVE-2026-98417
Published: October 15, 2026
Vulnerability identifier: #VU155888
CSH Severity: Low
CVSS v4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-98417
CWE-ID: CWE-197
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to trigger a kernel warning.
The vulnerability exists due to integer truncation in the handle_esp() function in net/xfrm/espintcp.c when processing ESP-in-TCP packets after the stream parser trims the TCP envelope. A remote attacker can supply packets whose transport header offset cannot be represented to trigger a kernel warning.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-98417
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.113-1
linux (Debian package) - update to 6.12.113-1
External References
- https://git.kernel.org/stable/c/206f396f46149dc8bc4dfd2b54b9879ba3ee1d7d
- https://git.kernel.org/stable/c/327b2a457dd7d5445f7395f371f3c65de79bd5ce
- https://git.kernel.org/stable/c/4a8243fd2e21980fa3fd10c0610e9155057cebd3
- https://git.kernel.org/stable/c/6c29681207bc213188afa603dff2d55e7178a341
- https://git.kernel.org/stable/c/96f01b53c2d05e003b040892256de54a586e8529
- https://git.kernel.org/stable/c/b2b84e73e0386ad0b4f9b8d3afde343e761f5275
- https://git.kernel.org/stable/c/cce630c751279e974fa0bb574d80575e0cc7e8f3
- https://git.kernel.org/stable/c/d37a5b87577c4b4c1a1dcb000a9dff1df2cf886b