CVE-2026-98531

A flaw was found in the Linux kernel's IPv6 Segment Routing (SRv6) component. This flaw allows a local user to cause an information disclosure. By sending a crafted Generic Netlink message with an attribute shorter than expected, the system performs an out-of-bounds read into uninitialized kernel memory. The attacker can subsequently retrieve this data, exposing sensitive kernel information.

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation is confined to local authenticated access and results exclusively in the disclosure of a minor amount of uninitialized kernel memory without compromising system integrity or availability. The issue stems from insufficient attribute length validation in the IPv6 Segment Routing Generic Netlink interface, allowing a local user to leak 16 bytes of kernel heap data. Because Segment Routing for IPv6 is typically utilized in specialized carrier or advanced routing network topologies, standard enterprise deployments do not expose this functionality to untrusted users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.