CVE-2026-98274

A flaw was found in the Linux kernel's networking subsystem. A local user could trigger a Denial of Service (DoS) or system instability by configuring a network socket to use both PSP encryption and a TCP Upper Layer Protocol (ULP), such as TLS. Because these features conflict in how they track decrypted packet data and validate outgoing traffic, using them together results in inconsistent kernel socket states.

This vulnerability is rated as Low severity because triggering it requires local access and the concurrent setup of mutually exclusive socket parameters to produce a denial of service. In typical Red Hat environments, PSP encryption is not part of standard network configurations, and simultaneous attachment with upper layer protocols such as TLS represents an atypical use case. Consequently, the real-world operational risk remains limited to systems where local accounts can manipulate specialized network socket options.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.