CVE-2026-97602

The Linux kernel is vulnerable to a flaw where fqdir_pre_exit() flushes skbs from incomplete queues without updating their completion state. This allows a fragment to reuse stale reassembly metadata after a queue is cleared. In IPv6 , this can cause ip6_frag_reasm() to use an old nhoffset with a ...