CVE-2026-98372

A flaw was found in the Linux kernel's IP Traffic Flow Security (IP-TFS) implementation within the XFRM subsystem. When processing incoming network traffic, a missing boundary check on packet fragment offsets allows an unbounded loop to read memory past the end of an on-stack array. A remote attacker can exploit this vulnerability by sending specially crafted IP-TFS packets, causing a kernel crash that leads to a denial of service (DoS) or potential information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.