-

CVE-2026-98526

llc: reserve device headroom for allocated frames

In the Linux kernel, the following vulnerability has been resolved:

llc: reserve device headroom for allocated frames

llc_alloc_frame() reserves link-layer headroom using the device type.
This is insufficient for stacked Ethernet devices such as VLAN devices,
where vlan_dev_hard_header() pushes a VLAN header before the lower
device's Ethernet header. An LLC response on such a device can
therefore underflow skb headroom in eth_header().

Use LL_RESERVED_SPACE() to account for the device's actual required
headroom while preserving the existing LLC device-type check.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version bf9ae5386bca8836c16e69ab8fdbe46767d7452a
Version < 018020f5a48cc86fdd6dc2d380f6c70443ae7639
Status affected
Version bf9ae5386bca8836c16e69ab8fdbe46767d7452a
Version < 3a3f57c4061d9e9cc3bc04205d36ce41ae3406c1
Status affected
Version bf9ae5386bca8836c16e69ab8fdbe46767d7452a
Version < 7c38524b2b2456bd33cb360420da6cbf9cad1b33
Status affected
Version bf9ae5386bca8836c16e69ab8fdbe46767d7452a
Version < 1937222c2511ac91377d39f28106c34734f5f8c6
Status affected
Version bf9ae5386bca8836c16e69ab8fdbe46767d7452a
Version < 16ceac2daa89dd16917bc488ab05b9dd6961a603
Status affected
Version bf9ae5386bca8836c16e69ab8fdbe46767d7452a
Version < e06f8b6e27cc616d3c587e9784c4a033eb310a16
Status affected
Version bf9ae5386bca8836c16e69ab8fdbe46767d7452a
Version < 3361c93e417384ebf28003e0fb6d5304653d3b05
Status affected
Version bf9ae5386bca8836c16e69ab8fdbe46767d7452a
Version < 72b5b9a28b996e09b8b5b944370c79851bb68f52
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.34
Status affected
Version 0
Version < 2.6.34
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.55
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.117
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/018020f5a48cc86fdd6dc2d380f6c70443ae7639
https://git.kernel.org/stable/c/3a3f57c4061d9e9cc3bc04205d36ce41ae3406c1
https://git.kernel.org/stable/c/7c38524b2b2456bd33cb360420da6cbf9cad1b33
https://git.kernel.org/stable/c/1937222c2511ac91377d39f28106c34734f5f8c6
https://git.kernel.org/stable/c/16ceac2daa89dd16917bc488ab05b9dd6961a603
https://git.kernel.org/stable/c/e06f8b6e27cc616d3c587e9784c4a033eb310a16
https://git.kernel.org/stable/c/3361c93e417384ebf28003e0fb6d5304653d3b05
https://git.kernel.org/stable/c/72b5b9a28b996e09b8b5b944370c79851bb68f52