CVE-2026-98929

A flaw was found in the Linux kernel's Media Access Control Security (MACsec) subsystem. When creating a MACsec network interface configured with hardware offload over a device supporting Large Receive Offload (LRO), the kernel registers the interface before its internal security entity (SecY) is initialized. A local user with network administration privileges can exploit this flaw to trigger a kernel warning, potentially leading to a denial of service (DoS) or the disclosure of uninitialized device attributes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.