CVE-2026-98954

A flaw was found in the Linux kernel's networking subsystem. Due to improper validation of Generic Segmentation Offload (GSO) packets during virtio network header processing, packets with malformed headers or certain IP options can bypass flow dissection and leave transport headers uninitialized. An attacker capable of transmitting crafted network traffic through affected interfaces can trigger an out-of-bounds memory read. This flaw primarily results in a system crash, leading to a Denial of Service (DoS), and may also lead to information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.