CVE-2026-98805

A flaw was found in the Linux kernel's TIPC (Transparent Inter-Process Communication) module. A network attacker who intercepts cluster communications can achieve information disclosure and alter transmitted data. This vulnerability occurs because TIPC resets encryption sequence counters during peer key updates, leading to the reuse of cryptographic numbers used once (nonces) with the same active encryption key. By exploiting this nonce reuse, an attacker can extract authentication keys and forge modified packets across the network.

Red Hat has evaluated this issue as having a security impact of Important because an unauthenticated network attacker who intercepts cluster communication can recover cryptographic authentication keys and tamper with encrypted traffic. Under standard configurations of Red Hat Enterprise Linux, the tipc module is not loaded by default, limiting the potential exposure to systems explicitly utilizing TIPC clustering. Furthermore, the vulnerability is constrained to deployments where peer-to-peer encryption is active and undergoing key renewal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.