CVE-2026-98952

A flaw was found in the Linux kernel's Packet Forwarding Control Protocol (PFCP) component. A remote attacker can exploit this vulnerability by sending a truncated or fragmented PFCP packet with the session flag enabled, causing the kernel to read memory beyond the end of the packet buffer. This out-of-bounds read can lead to a Denial of Service (DoS) via a system crash or cause incorrect network traffic handling due to corrupted tunnel metadata.

Red Hat has evaluated this vulnerability as an Important severity flaw because an unauthenticated remote attacker could transmit malformed network packets over UDP to trigger an out-of-bounds read in the kernel, potentially causing a system crash or corrupting tunnel classification metadata. However, this flaw resides in the Packet Forwarding Control Protocol subsystem introduced in newer upstream kernels, which is not shipped in supported Red Hat Enterprise Linux kernels. Consequently, supported Red Hat Enterprise Linux releases are not affected by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.