CVE-2026-99041

A flaw was found in the Linux kernel. A local user can trigger a null-pointer dereference in the IPv6 Encapsulated Remote Switch Port Analyzer ERSPAN networking module by redirecting traffic with attached tunnel metadata to an ERSPAN device. This flaw leads to a kernel panic, resulting in a syste...

kernel: erspan: do not assume transport header is always set

In the Linux kernel, the following vulnerability has been resolved: erspan: do not assume transport header is always set Rewrite tests in ip6erspantunnelxmit and erspanfbxmit to not assume transport header is set. syzbot reported: WARNING: CPU: 0 PID: 1350 at include/linux/skbuff.h:2911...