All vulnerabilities

Servers and applications

CVE-2026-98950

flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()

Severity
Unrated
Published
23 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
5.15.224, 6.1.191, 6.6.160, 6.12.113, 6.18.57, 7.2.11
Sources
CVE Program

Affected software

SoftwareAffected versions
Linux kernelServers and applications · cna:linux|linux
  • From 6.19 before 7.2.11
  • From 6.13 before 6.18.57
  • From 6.7 before 6.12.113
  • From 6.2 before 6.6.160
All 7 release lines
  • From 4.20 before 5.10.273
  • From 5.11 before 5.15.224
  • From 5.16 before 6.1.191
  • From 6.2 before 6.6.160
  • From 6.7 before 6.12.113
  • From 6.13 before 6.18.57
  • From 6.19 before 7.2.11

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-98950