CVE-2026-98950

A flaw was found in the Linux kernel. A remote attacker could trigger a Denial of Service (DoS) or improper packet routing due to an integer truncation vulnerability within the Berkeley Packet Filter (BPF) flow dissector. When handling packets with header lengths exceeding 16-bit limits (65,535 bytes), the upper bound value is truncated during offset clamping, forcing network and transport header offsets to zero. This miscalculation can disrupt packet classification and cause network traffic to be misrouted or dropped.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.