CVE-2026-98802

A flaw was found in the Linux kernel. When processing IPv6 segment routing seg6 headers, the kernel modifies routing and destination address fields without first ensuring that the network packet buffer is writable. If the packet buffer is shared or cloned, such as during packet inspection or...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because cipsov4skbuffdelattr fails to adjust the cache offset of subsequent options when removing CIPSO bytes. This may result in accessing incorrect bytes and causing packet data to be interpreted as option length, which is...

SUSE CVE-2026-98802

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

Siemens Desigo PXC/PXM Controllers Out-of-bounds Read (CVE-2026-89208)

The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries. This plugin only works with Tenable.ot. Please visit...

AZL-109146 CVE-2026-98802 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

CVE-2026-98802

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

CVE-2026-98802

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

UBUNTU-CVE-2026-98802

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

EUVD-2026-103887

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

CVE-2026-98802 seg6: ensure packet data is writable before modifying SRH and IPv6 DA

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

PT-2026-117021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the advance nextseg function modifies the Segment Routing Header SRH Segments Left field and the IPv6 destination address without verifying if the packet data is...

CVE-2026-98802: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

Linux Distros Unpatched Vulnerability : CVE-2026-98802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address witho...

Astra Linux – vulnerability in qemu

In QEMU 4.2.1, ethgetgsotype in net/eth.c allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process by sending packet data lacking a valid Layer 3 protocol...

CVE-2026-89208: Out-of-bounds Read

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions = V2.3, Desigo PXC00-U All versions = V2.3, Desigo PXC001-E.D All versions = V2.3, Desigo PXC100-E.D All versions = V2.3, Desigo PXC12-E.D All versions = V2.3,...

CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

DEBIAN-CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

CVE-2026-72064

CVE-2026-72064 relates to the Linux kernel net: mana RX path. When frag_count > 1, RX buffers are allocated from page pool fragments and remain DMA mapped; the RX completion path omits dma_unmap_single(), so the implicit CPU sync is not performed before passing data to the networking stack. Th...

OSV-2026-1095 Heap-buffer-overflow in grk::t1::CodeblockDecompressImpl::parsePacketData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540111888 Crash type: Heap-buffer-overflow READ 8 Crash state: grk::t1::CodeblockDecompressImpl::parsePacketData grk::PacketParser::readData grk::PacketParser::parsePacketData...