CVE-2026-97417

The Linux kernel contains a vulnerability in the netfilter: nf_conntrack component. Specifically, the tcp_sack() function's timestamp-only fast path incorrectly dereferences the option stream as *(__be32 *)ptr, which assumes a 4-byte alignment that the TCP option stream does not guarantee. This c...

CVE-2026-97417 netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrack: use getunalignedbe32 in tcpsack The timestamp-only fast path dereferences the option stream as be32 ptr, which assumes 4-byte alignment that the TCP option stream does not guarantee. Use getunalignedbe32...