CVE-2026-97597

The Linux kernel contains a vulnerability in the ipv6 flowlabel mechanism where the ipv6_flowlabel_get() function fails to apply lease admission checks during the recheck path for compatible existing flowlabels. This allows repeated GET requests for a shareable label to grow a socket's lease list...

EUVD-2026-86728

In the Linux kernel, the following vulnerability has been resolved: ipv6: flowlabel: cap duplicate leases per socket ipv6flowlabelget allocates an ipv6flsocklist entry for every successful GET. The recheck path for a compatible existing flowlabel links another lease without applying any lease...