CVE-2026-99191

In the Linux kernel, the following vulnerability has been resolved: calipso: keep BIG TCP payloadlen in calipsoskbuffsetattr calipsoskbuffsetattr adjusts payloadlen by the length of the option it inserts or resizes: payload = ntohsip6hdr-payloadlen; ip6hdr-payloadlen = htonspayload + lendelta; GR...

CVE-2026-99191

The Linux kernel contains a vulnerability in the CALIPSO component within the calipso_skbuff_setattr() function. The root cause is that the function incorrectly adjusts the payload_len field by adding a length delta, which fails to account for BIG TCP packets larger than IPV6_MAXPLEN. Because ipv...