CVE-2026-98554

A flaw was found in the Linux kernel's virtual local area network (VLAN) driver. When processing network packets that lack sufficient reserved buffer space (headroom) before network headers are appended, the system triggers a panic condition. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the system.

Red Hat rates this vulnerability as Moderate because it is confined to a local denial-of-service condition without compromising system integrity or confidentiality. The issue arises during packet transmission over VLAN interfaces when buffer headroom becomes insufficient during dynamic device adjustments or with specific frame types, triggering a kernel panic. Exploitation requires local authenticated access with permissions to transmit specific frame types or reconfigure network devices, thereby limiting the overall blast radius.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.