CVE-2026-98853

A flaw was found in the Linux kernel's Generic Segmentation Offload (GSO) implementation. When processing deeply nested IP-in-IP packets, recursive segmentation is not properly restricted, which can exhaust kernel stack memory. A remote attacker could exploit this vulnerability by transmitting network packets with excessive encapsulation layers, causing a kernel crash and leading to a Denial of Service (DoS).

This vulnerability is evaluated as Important for Red Hat Enterprise Linux because an unauthenticated remote attacker can force an immediate system crash without requiring specialized user privileges or local access. In standard deployments handling encapsulated network traffic, the operating system stack overflows during recursive segmentation handling. The impact is strictly confined to service availability, with no compromise of host data integrity or confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.