CVE-2026-98850

The Linux kernel contains a vulnerability in net/packet where the tpacket_snd() function fails to bound the len_sum variable. Because userspace can recycle completed frames concurrently, len_sum can wrap into a negative range after sufficient transmissions. Specifically, certain frame sizes can p...