CVE-2026-98950

The Linux kernel contains a vulnerability in the bpf_flow_dissect() function where the hlen (header length) parameter can undergo u16 truncation during offset sanitization. When hlen exceeds 65535, the upper bound is truncated before being used in clamp_t(u16, ..., hlen) . For example, if hlen is...

EUVD-2026-108924

In the Linux kernel, the following vulnerability has been resolved: flowdissector: avoid u16 truncation of hlen in bpfflowdissect bpfflowdissect sanitizes the offsets returned by the BPF program with clamptu16, ..., hlen. If hlen is bigger than 65535, the upper bound is truncated before the...

CVE-2026-98950

In the Linux kernel, the following vulnerability has been resolved: flowdissector: avoid u16 truncation of hlen in bpfflowdissect bpfflowdissect sanitizes the offsets returned by the BPF program with clamptu16, ..., hlen. If hlen is bigger than 65535, the upper bound is truncated before the...