CVE-2026-98306

The Linux kernel contains a vulnerability where the IPSKB_L3SLAVE flag is not set during IPIP decapsulation , despite being set for IPv6. Specifically, while vrf_ip6_rcv() sets IP6SKB_L3SLAVE in the IPv6 control block, decap_and_validate() fails to set IPSKB_L3SLAVE in the IPv4 control block. Thi...