CVE-2026-98288

The Linux kernel contains a vulnerability in the stmmac driver where stmmac_tso_xmit() incorrectly stores the protocol header length in a u8 variable. Because stmmac_tso_valid_packet() allows headers up to 1023 bytes, any header exceeding 255 bytes—such as a TCP over IPv6 socket with specific des...