CVE-2026-98493

A flaw was found in the Linux kernel. This vulnerability allows an attacker capable of specifying system boot or network parameters to cause a Denial of Service (DoS) or memory corruption. During Dynamic Host Configuration Protocol (DHCP) autoconfiguration, the kernel appends options into a fixed-size buffer without verifying available space for hostname and vendor class identifiers. Supplying oversized configuration parameters triggers an out-of-bounds memory write, which can abort the boot process with a kernel panic.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.