CVE-2026-98233
Description
In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 ("net/packet: tpacket_rcv: avoid a producer race condition") added rx_owner_map and made tpacket_rcv() claim a V1 or V2 ring slot before converting the virtio-net header. If the conversion fails, the drop path leaves the slot claimed. With a one-frame TPACKET_V2 ring, an unsupported UDP GSO packet leaves the only slot unavailable, so the ring also drops the next valid packet. Clear the ownership bit on this error path. TPACKET_V3 already clears its block state here.
How to fix
- Linux Linuxbb10a0084c03a94364aeec542beddc5d49b59f59, b8c0cb3069058c2d67b5c7c833b2833381ecffdc, 2daa618e7ff19eefcbda281bc4c5998c4140f9cf, 23cd30498891d29a69ec9b75bd92f8a0f21f1342, 49a48a5aaf85fe69d2dc3fb334b4854fadf44e39, 805edbdcb8681da5f7ee43b3c3c809f7a8c31208, 693209a237fc548791cf402441db8b68d1da7d38, 33ff111d7ba3beb86e28938d6382bb5beabd865a, 4.15, 4.20, 5.5, 5.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 61fad6816fc10fb8793a925d5c1256d1c3db0cd2 ≤ v < bb10a0084c03a94364aeec542beddc5d49b59f59, 61fad6816fc10fb8793a925d5c1256d1c3db0cd2 ≤ v < b8c0cb3069058c2d67b5c7c833b2833381ecffdc, 61fad6816fc10fb8793a925d5c1256d1c3db0cd2 ≤ v < 2daa618e7ff19eefcbda281bc4c5998c4140f9cf, 61fad6816fc10fb8793a925d5c1256d1c3db0cd2 ≤ v < 23cd30498891d29a69ec9b75bd92f8a0f21f1342, 61fad6816fc10fb8793a925d5c1256d1c3db0cd2 ≤ v < 49a48a5aaf85fe69d2dc3fb334b4854fadf44e39, 61fad6816fc10fb8793a925d5c1256d1c3db0cd2 ≤ v < 805edbdcb8681da5f7ee43b3c3c809f7a8c31208, 61fad6816fc10fb8793a925d5c1256d1c3db0cd2 ≤ v < 693209a237fc548791cf402441db8b68d1da7d38, 61fad6816fc10fb8793a925d5c1256d1c3db0cd2 ≤ v < 33ff111d7ba3beb86e28938d6382bb5beabd865a, 2975472e042e0bbfeeabddc5023cb8c011ec5a07, 6fb0e4385928900ccb8697748555b3f54bba5193, 86137342fd4cf52882842aa8d1318b2661f08e8a, b06e4d3ed4044c2facf10a511d809f9aa29d960e, 4.14.175 ≤ v < 4.15, 4.19.114 ≤ v < 4.20, 5.4.29 ≤ v < 5.5, 5.5.14 ≤ v < 5.6, 5.6 | bb10a0084c03a94364aeec542beddc5d49b59f59, b8c0cb3069058c2d67b5c7c833b2833381ecffdc, 2daa618e7ff19eefcbda281bc4c5998c4140f9cf, 23cd30498891d29a69ec9b75bd92f8a0f21f1342, 49a48a5aaf85fe69d2dc3fb334b4854fadf44e39, 805edbdcb8681da5f7ee43b3c3c809f7a8c31208, 693209a237fc548791cf402441db8b68d1da7d38, 33ff111d7ba3beb86e28938d6382bb5beabd865a, 4.15, 4.20, 5.5, 5.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.