Incorrect calculation in Linux kernel - CVE-2026-98925
Published: October 23, 2026
Vulnerability identifier: #VU157579
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-98925
CWE-ID: CWE-682
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged user to trigger kernel warnings and potentially disrupt TCP receive processing.
The vulnerability exists due to incorrect sequence-number accounting in the Linux kernel BPF sockmap component when a BPF stream_verdict program redirects data back to the same socket with BPF_F_INGRESS. A local privileged user can trigger this self-redirect followed by a socket read to advance copied_seq twice for the same data, triggering kernel warnings and potentially disrupting TCP receive processing.
Affected software
Linux kernel
How to mitigate CVE-2026-98925
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/490a83d6386eec1d29f470c8d7331677fb46c3b7
- https://git.kernel.org/stable/c/88942054191185c6f8bea5568cbb5614d1e99af9
- https://git.kernel.org/stable/c/ae1ffd04e98beefbe5d83335d506b0bcd5c2a6b3
- https://git.kernel.org/stable/c/cf9aefb26a071cb8b6fdd761c27e022a1184946d
- https://git.kernel.org/stable/c/dc98def81e3c629e25fcdd5753b1db93aab27ce9
- https://git.kernel.org/stable/c/ef6f2182fee6b9721c005ccfc6aec0a47f79bbfa